From c6e98947ce33445165e0077ee3a322f61f3003e4 Mon Sep 17 00:00:00 2001 From: Till Brehm Date: Mon, 20 Jan 2014 15:26:43 +0100 Subject: [PATCH] Improved path regex in system.inc.php --- server/lib/classes/system.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/lib/classes/system.inc.php b/server/lib/classes/system.inc.php index a393384c96..52c9f803df 100644 --- a/server/lib/classes/system.inc.php +++ b/server/lib/classes/system.inc.php @@ -851,7 +851,7 @@ class system{ //* We allow only some characters in the path // * is allowed, for example it is part of wildcard certificates/keys: *.example.com.crt - if(!preg_match('@^/[-a-zA-Z0-9_/.*~]{1,}$@', $path)) return false; + if(!preg_match('@^/[-a-zA-Z0-9_/.*]{1,}[~]?$@', $path)) return false; //* Check path for symlinks $path_parts = explode('/', $path); -- GitLab