Fix path normalisation in Dancer::FileUtils

This solves a potential directory traversal issue allowing static files to be served from a level above the public/ dir, which could be dangerous. Thanks to Vladimir Lettiev aka crux for reporting this regression.
PerlDancer · Jul 26, 2011 · 75a47c0 · 75a47c0
1 parent 49ca988
commit 75a47c0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/Dancer/FileUtils.pm b/lib/Dancer/FileUtils.pm
@@ -103,6 +103,7 @@ sub normalize_path {
 
     $path =~ s{/\./}{/}g;
     $path =~ s{$seqregex}{}g;
+    $path =~ s{$seqregex}{};
 
     return $path;
 }