From aeb73c71d320e5bf8e6be4c4f3be58ae33bcb91f Mon Sep 17 00:00:00 2001 From: Arjan van de Ven Date: Mon, 23 Mar 2015 14:15:42 -0400 Subject: [PATCH] few more checks --- src/server.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/server.c b/src/server.c index 8abb972..baa9586 100644 --- a/src/server.c +++ b/src/server.c @@ -186,7 +186,7 @@ static void *server_thread(void *arg) path++; - if (strstr(path, "..") || strstr(prefix, "..")) { + if (strstr(path, "..") || strstr(prefix, "..") || strstr(path, "'") || strstr(path, ";")) { close(fd); return NULL; }