Skip to content
  • Robert Ricci's avatar
    Better security for docwrapper - make the regular expression tighter · 656dedcc
    Robert Ricci authored
    so that it only allows [word].html files (and .txt files for the
    doc/ version.)
    
    The previous version allowed users to get the source of our php
    scripts - probably not too bad, since there should not be big secrets
    in them, but it could help an attacker look for exploitable bugs.
    656dedcc