summary refs log tree commit diff
path: root/scripts/notify-send.scpt
diff options
context:
space:
mode:
authorJune McEnroe2022-04-20 18:29:28 -0400
committerJune McEnroe2022-04-20 18:29:28 -0400
commit1b8be724bc5f3cc18da770e01174719ec4890791 (patch)
tree79cbb0ba57f3bf265c587089aca902f786e73639 /scripts/notify-send.scpt
parent70268b4cd37cdf92b71dfef9e012af1644f5d706 (diff)
Sanitize leading dots from log path components
Prevent directory traversal by sanitizing leading dots as well as
slashes from log path components, which can be controlled by the
server. Side effect of preventing hidden dotfiles is a bonus, I
think.

Also check that the full path actually fits in the buffer.

Reported-by: Samanta Navarro <ferivoz@riseup.net>
Diffstat (limited to 'scripts/notify-send.scpt')
0 files changed, 0 insertions, 0 deletions