Skip the :path_traversal protection, fixes #1391.

padrino · Oct 23, 2013 · 2aa22ea · 2aa22ea
1 parent c987037
commit 2aa22ea
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/padrino-core/lib/padrino-core/application.rb b/padrino-core/lib/padrino-core/application.rb
@@ -206,7 +206,7 @@ def default_paths!
       end
 
       def default_security!
-        set :protection, true
+        set :protection, :except => :path_traversal
         set :authentication, false
         set :sessions, false
         set :protect_from_csrf, false