Nemcio/Redmine
1
0
Fork 0
mirror of https://github.com/redmine/redmine.git synced 2026-07-07 18:12:33 +02:00
Code Issues Packages Projects Releases Activity

Merge r24393 from trunk to 6.0-stable (#43690).

Browse Source 
git-svn-id: https://svn.redmine.org/redmine/branches/6.0-stable@24397 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
Marius Balteanu
2026-02-05 06:13:29 +00:00
parent f8e8ce0a7f
commit 468d573aaf
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/redmine/scm/adapters/filesystem_adapter.rb
View File

@@ -111,7 +111,7 @@ module Redmine
# Here we do not shell-out, so we do not want quotes.
def target(path=nil)
# Prevent the use of ..
if path and !/(^|\/)\.\.(\/|$)/.match?(path)
if path and !/(^|[\/\\])\.\.([\/\\]|$)/.match?(path)
return "#{self.url}#{without_leading_slash(path)}"
end