Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[webserver] - fixed possible directory traversal bug due to insuffici… #8446

Merged
merged 1 commit into from Nov 29, 2015

Conversation

Projects
None yet
4 participants
@Memphiz
Copy link
Member

Memphiz commented Nov 26, 2015

…ent url checking

As pointed out by forum member ChessSpider the security fix here:

bdff099

was accidently removed again here:

12917d5

Allowing to access any possible file from our webserver.

@Montellese one sanity check please

thx to ChessSpider for reporting it in.

@Montellese

This comment has been minimized.

Copy link
Member

Montellese commented Nov 29, 2015

Looks good. Thanks for looking into it.

@Memphiz

This comment has been minimized.

Copy link
Member Author

Memphiz commented Nov 29, 2015

jenkins build and merge

@jenkins4kodi jenkins4kodi merged commit c1e538e into xbmc:master Nov 29, 2015

1 check was pending

default Merged build started.
Details

@Memphiz Memphiz deleted the Memphiz:fix_http_traversal branch May 22, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.