raito/hydra
0
0
Fork 0
forked from lix-project/hydra
Code Pull requests Activity

Allow : and + in build product filenames.

Browse source
This commit is contained in:
Petr Rockai 2013-05-27 12:42:52 +02:00
parent dcf386cfed
commit bb38bdfe35
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/lib/Hydra/Controller/Build.pm
View file

@ -298,7 +298,7 @@ sub contents : Chained('buildChain') PathPart Args(1) {
notFound($c, "Product $path has disappeared.") unless -e $path;
# Sanitize $path to prevent shell injection attacks.
$path =~ /^\/[\/[A-Za-z0-9_\-\.=]+$/ or die "Filename contains illegal characters.\n";
$path =~ /^\/[\/[A-Za-z0-9_\-\.=+:]+$/ or die "Filename contains illegal characters.\n";
# FIXME: don't use shell invocations below.