Use DS instead of checking both slash styles.

Refs #5905
cakephp · Mar 10, 2015 · cad57dc · cad57dc
1 parent 43f16f3
commit cad57dc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Cake/Network/CakeResponse.php b/lib/Cake/Network/CakeResponse.php
@@ -1336,7 +1336,7 @@ public function file($path, $options = array()) {
 			'download' => null
 		);
 
-		if (strpos($path, '../') !== false || strpos($path, '..\\') !== false) {
+		if (strpos($path, '..' . DS) !== false) {
 			throw new NotFoundException(__d(
 				'cake_dev',
 				'The requested file contains `..` and will not be read.'