What about the startsWith('/') part? This suggests previous patch may
have failed to block absolute paths. Jamie, you seem to have some
reproducer available, can you check that?-- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kdenetwork in Ubuntu. https://bugs.launchpad.net/bugs/757526 Title: Updated fix for CVE-2010-1000 -- kubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
