Matus Fabian 5409d33002 http_static: sanitize path before file read ...

Romove dot segments from requested target path before start reading
file in file handler to prevent path traversal.

Type: fix

Change-Id: I3bdd3e9d7fffd33c9c8c608169c1dc73423b7078
Signed-off-by: Matus Fabian <matfabia@cisco.com>

2024-05-28 20:42:30 +00:00

1.7 KiB

Raw Blame History

View Raw