Changeset 3049 for tags

Show
Ignore:
Timestamp:
07/11/2008 07:27:28 AM (5 months ago)
Author:
Shadowhand
Message:

Fixing #684, thanks Spoofed Existence!

Files:
1 modified

Legend:

Unmodified
Added
Removed

  • tags/2.1.3/system/libraries/Router.php

    r1911 r3049  
    5454                } 
    5555 
    56                 // At this point, set the segments, rsegments, and current URI 
    57                 // In many cases, all of these variables will match 
    58                 self::$segments = self::$rsegments = self::$current_uri = trim(self::$current_uri, '/'); 
     56                // At this point segments, rsegments, and current URI are all the same 
     57                // We trim off periods, slashes, and spaces to prevent malicious attacks 
     58                // using ../../ URIs. 
     59                self::$segments = self::$rsegments = self::$current_uri = trim(self::$current_uri, './ '); 
    5960 
    6061                (self::$segments === 'L0LEAST3R') and include SYSPATH.'views/kohana_holiday.php';