Do not add a / to empty path in 'path_traversal'

sinatra · May 27, 2012 · c9c75e8 · c9c75e8
1 parent 1845aa3
commit c9c75e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/rack/protection/path_traversal.rb b/lib/rack/protection/path_traversal.rb
@@ -12,7 +12,7 @@ module Protection
     class PathTraversal < Base
       def call(env)
         path_was         = env["PATH_INFO"]
-        env["PATH_INFO"] = cleanup path_was if path_was
+        env["PATH_INFO"] = cleanup path_was if path_was && !path_was.empty?
         app.call env
       ensure
         env["PATH_INFO"] = path_was