I solved some issues with Directory traversal

2015-03-26 16:14:32 -04:00
parent 1bb9f57152
commit c595bd10bf
4 changed files with 14 additions and 2 deletions
--- a/workflow/engine/classes/class.wsTools.php
+++ b/workflow/engine/classes/class.wsTools.php
@@ -1387,6 +1387,9 @@ class workspaceTools

    static public function dirPerms($filename, $owner, $group, $perms)
    {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $filename = $filter->xssFilterHard($filename, 'path');
        $chown = @chown($filename, $owner);
        $chgrp = @chgrp($filename, $group);
        $chmod = @chmod($filename, $perms);