few more checks

This commit is contained in:
Arjan van de Ven
2015-03-23 14:15:42 -04:00
parent a64fc31838
commit aeb73c71d3
+1 -1
View File
@@ -186,7 +186,7 @@ static void *server_thread(void *arg)
path++;
if (strstr(path, "..") || strstr(prefix, "..")) {
if (strstr(path, "..") || strstr(prefix, "..") || strstr(path, "'") || strstr(path, ";")) {
close(fd);
return NULL;
}