diff options
| author | Aaron Patterson <aaron.patterson@gmail.com> | 2014-11-05 15:37:36 -0800 |
|---|---|---|
| committer | Aaron Patterson <aaron.patterson@gmail.com> | 2014-11-16 11:23:44 -0800 |
| commit | 307402febd448646df796e7dabbbaa5734f641aa (patch) | |
| tree | 828d20f68284938721aa0b5447b6e5626fabb526 /railties | |
| parent | 03366b14d15aeebf255a54b2878dcc6206c0c372 (diff) | |
| download | rails-307402febd448646df796e7dabbbaa5734f641aa.tar.gz rails-307402febd448646df796e7dabbbaa5734f641aa.tar.bz2 rails-307402febd448646df796e7dabbbaa5734f641aa.zip | |
correctly escape backslashes in request path globs
Conflicts:
actionpack/lib/action_dispatch/middleware/static.rb
make sure that unreadable files are also not leaked
CVE-2014-7829
Diffstat (limited to 'railties')
0 files changed, 0 insertions, 0 deletions