Fabrice Luraine
Account owner
Fabrice Luraine's latest activity
Monday, November 30 2009
-
- State changed from new to resolved
(from [c99be76fc22bbd5de7e167fab8100e800bf5ce55]) Fixing big security issue in render_file that allows accessing any files from outside public folder using ../ ...
-
Fabrice Luraine created the ticket at 9:42 AMrender_fileallows accessing any files from outside public folder using../.
Can be solved with a quick fic by stripping those../I plan to add an improved sec...