Please sign in to comment.
Reject file paths containing `..`.
Paths containing `..` are generally up to no good. Throw an exception, as developers can use realpath() if they really need to get relative paths. Fixes #3370
- Loading branch information...
Showing with 18 additions and 0 deletions.