diff options
author | Peter Wu | 2014-07-20 16:11:08 +0200 |
---|---|---|
committer | Peter Wu | 2014-07-20 23:23:24 +0200 |
commit | 3fd10f9e4adb28da89ced5eb3e71c7536f308918 (patch) | |
tree | fe21968ab76163246f389d319f2a3da2ade63f93 /js/CGP-async.js | |
parent | Fix type confusion (diff) | |
download | apt-panopticon_cgp-3fd10f9e4adb28da89ced5eb3e71c7536f308918.zip apt-panopticon_cgp-3fd10f9e4adb28da89ced5eb3e71c7536f308918.tar.gz apt-panopticon_cgp-3fd10f9e4adb28da89ced5eb3e71c7536f308918.tar.bz2 apt-panopticon_cgp-3fd10f9e4adb28da89ced5eb3e71c7536f308918.tar.xz |
security: Add missing input validation for plugin
This is a security bug. The contents of the file are not
immediately disclosed, but it could disclose environment information
to the attacker (when display_errors=1 and an ancient PHP version
is used that does not check for '\0' in `file_exists()`).
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions