Sanitize file name in WebODF plugin

pydio · Sep 30, 2014 · ff22784 · ff22784
1 parent 2956a83
commit ff22784
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/core/src/plugins/editor.webodf/frame.php b/core/src/plugins/editor.webodf/frame.php
@@ -1,6 +1,6 @@
 <?php
-$AJXP_SECURE_TOKEN = $_GET["token"];
-$AJXP_FILE_URL = $_GET["file"];
+require_once('../../core/classes/class.AJXP_Utils.php');
+$AJXP_FILE_URL = AJXP_Utils::securePath(AJXP_Utils::sanitize($_GET["file"], AJXP_SANITIZE_FILENAME));
 ?>
 <html>
 <head>