diff --git a/server/lib/classes/system.inc.php b/server/lib/classes/system.inc.php index a393384c96b7c77bca45360f7643fc85ea414c4e..52c9f803df9d156cc83daf9de1c2c4570ffc5c10 100644 --- a/server/lib/classes/system.inc.php +++ b/server/lib/classes/system.inc.php @@ -851,7 +851,7 @@ class system{ //* We allow only some characters in the path // * is allowed, for example it is part of wildcard certificates/keys: *.example.com.crt - if(!preg_match('@^/[-a-zA-Z0-9_/.*~]{1,}$@', $path)) return false; + if(!preg_match('@^/[-a-zA-Z0-9_/.*]{1,}[~]?$@', $path)) return false; //* Check path for symlinks $path_parts = explode('/', $path);