diff options
| author | Joey Hess <joey@kitenet.net> | 2011-06-14 13:41:07 -0400 |
|---|---|---|
| committer | Joey Hess <joey@kitenet.net> | 2011-06-14 13:41:07 -0400 |
| commit | 8619faaa8b01c4675be8d2c53d5d96f9c5d3fa16 (patch) | |
| tree | 8a2ce44d8bd24dd33ce521e3d1ae6d942103b497 /IkiWiki/Plugin | |
| parent | 1d951583a6d3718ea5e44b8c52fb2acbe5a989e8 (diff) | |
| download | ikiwiki-8619faaa8b01c4675be8d2c53d5d96f9c5d3fa16.tar ikiwiki-8619faaa8b01c4675be8d2c53d5d96f9c5d3fa16.tar.gz | |
untaint and linkpage the page name used in attachment holding directory
Diffstat (limited to 'IkiWiki/Plugin')
| -rw-r--r-- | IkiWiki/Plugin/attachment.pm | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/IkiWiki/Plugin/attachment.pm b/IkiWiki/Plugin/attachment.pm index f46388948..f4bfbe98f 100644 --- a/IkiWiki/Plugin/attachment.pm +++ b/IkiWiki/Plugin/attachment.pm @@ -150,7 +150,8 @@ sub formbuilder (@) { sub attachment_holding_dir { my $page=shift; - return $config{wikistatedir}."/attachments/$page"; + return $config{wikistatedir}."/attachments/". + IkiWiki::possibly_foolish_untaint(linkpage($page)); } # Stores the attachment in a holding area, not yet in the wiki proper. |