Commit bc5d4072160bc7b8ba082792a6356886b7f7679f:
    file name should be considered safe


Branch: refs/heads/master
Author: Sam Ruby <[email protected]>
Committer: Sam Ruby <[email protected]>
Pusher: rubys <[email protected]>

------------------------------------------------------------
www/board/agenda/models/ipc.rb                               | + -
------------------------------------------------------------
2 changes: 1 additions, 1 deletions.
------------------------------------------------------------


diff --git a/www/board/agenda/models/ipc.rb b/www/board/agenda/models/ipc.rb
index 7766e98..136c785 100644
--- a/www/board/agenda/models/ipc.rb
+++ b/www/board/agenda/models/ipc.rb
@@ -46,7 +46,7 @@ def self.start_server
         RbConfig::CONFIG["ruby_install_name"] + RbConfig::CONFIG["EXEEXT"]
       )
 
-      exec(ruby, __FILE__, '--server-only')
+      exec(ruby, __FILE__.dup.untaint, '--server-only')
     end
 
     Process.detach pid

Reply via email to