提交 5045179b 编写于 作者: K kohsuke
上级 759d4d90
......@@ -79,7 +79,7 @@ public final class DirectoryBrowserSupport {
return;
}
String path = getPath(req).replace('\\','/');
String path = getPath(req);
if(path.indexOf("/../")!=-1) {
// don't serve anything other than files in the artifacts dir
rsp.sendError(HttpServletResponse.SC_BAD_REQUEST);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册