Commit 20eec48e authored by Russ Fish's avatar Russ Fish

Python's TemporaryFile.mkstemp() may now put dashes in the generated...

Python's TemporaryFile.mkstemp() may now put dashes in the generated filenames, causing batchexp to fail when invoked through XMLRPC.
parent 3daf343d
......@@ -935,7 +935,7 @@ sub ParseArgs()
#
if (! ($tempnsfile =~ /^\/tmp\/[-\w]+-\d+\.nsfile/) &&
! ($tempnsfile =~ /^\/tmp\/\d+\.ns/) &&
! ($tempnsfile =~ /^\/var\/tmp\/php\w+/) &&
! ($tempnsfile =~ /^\/var\/tmp\/php[-\w]+/) &&
! TBValidUserDir($tempnsfile, 0)) {
tberror({type => 'primary', severity => SEV_ERROR,
error => ['disallowed_directory', $tempnsfile]},
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment