Skip to content
Permalink
Browse files

Use DS instead of checking both slash styles.

Refs #5905
  • Loading branch information...
markstory committed Mar 10, 2015
1 parent 43f16f3 commit cad57dcc28ed9996b52e681ae06d62bc7b5c79c0
Showing with 1 addition and 1 deletion.
  1. +1 −1 lib/Cake/Network/CakeResponse.php
@@ -1336,7 +1336,7 @@ public function file($path, $options = array()) {
'download' => null
);
if (strpos($path, '../') !== false || strpos($path, '..\\') !== false) {
if (strpos($path, '..' . DS) !== false) {
throw new NotFoundException(__d(
'cake_dev',
'The requested file contains `..` and will not be read.'

0 comments on commit cad57dc

Please sign in to comment.
You can’t perform that action at this time.