From e15e3202eb04048feb302b39d946f1ae1a15c306 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Mon, 26 Nov 2007 15:30:44 -0500 Subject: releasing version 2.14 --- IkiWiki/Render.pm | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'IkiWiki/Render.pm') diff --git a/IkiWiki/Render.pm b/IkiWiki/Render.pm index 35d663a7a..e4ff2b39b 100644 --- a/IkiWiki/Render.pm +++ b/IkiWiki/Render.pm @@ -245,6 +245,17 @@ sub prune ($) { #{{{ } #}}} sub refresh () { #{{{ + # security check, avoid following symlinks in the srcdir path + my $test=$config{srcdir}; + while (length $test) { + if (-l $test) { + error("symlink found in srcdir path ($test)"); + } + unless ($test=~s/\/+$//) { + $test=dirname($test); + } + } + # find existing pages my %exists; my @files; -- cgit v1.2.3