Commit bc5d4072160bc7b8ba082792a6356886b7f7679f:
file name should be considered safe
Branch: refs/heads/master
Author: Sam Ruby <[email protected]>
Committer: Sam Ruby <[email protected]>
Pusher: rubys <[email protected]>
------------------------------------------------------------
www/board/agenda/models/ipc.rb | + -
------------------------------------------------------------
2 changes: 1 additions, 1 deletions.
------------------------------------------------------------
diff --git a/www/board/agenda/models/ipc.rb b/www/board/agenda/models/ipc.rb
index 7766e98..136c785 100644
--- a/www/board/agenda/models/ipc.rb
+++ b/www/board/agenda/models/ipc.rb
@@ -46,7 +46,7 @@ def self.start_server
RbConfig::CONFIG["ruby_install_name"] + RbConfig::CONFIG["EXEEXT"]
)
- exec(ruby, __FILE__, '--server-only')
+ exec(ruby, __FILE__.dup.untaint, '--server-only')
end
Process.detach pid