You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@whimsical.apache.org by Sam Ruby <ru...@apache.org> on 2016/03/16 16:21:33 UTC

[whimsy.git] [1/2] Commit bc5d407: file name should be considered safe

Commit bc5d4072160bc7b8ba082792a6356886b7f7679f:
    file name should be considered safe


Branch: refs/heads/master
Author: Sam Ruby <ru...@intertwingly.net>
Committer: Sam Ruby <ru...@intertwingly.net>
Pusher: rubys <ru...@apache.org>

------------------------------------------------------------
www/board/agenda/models/ipc.rb                               | + -
------------------------------------------------------------
2 changes: 1 additions, 1 deletions.
------------------------------------------------------------


diff --git a/www/board/agenda/models/ipc.rb b/www/board/agenda/models/ipc.rb
index 7766e98..136c785 100644
--- a/www/board/agenda/models/ipc.rb
+++ b/www/board/agenda/models/ipc.rb
@@ -46,7 +46,7 @@ def self.start_server
         RbConfig::CONFIG["ruby_install_name"] + RbConfig::CONFIG["EXEEXT"]
       )
 
-      exec(ruby, __FILE__, '--server-only')
+      exec(ruby, __FILE__.dup.untaint, '--server-only')
     end
 
     Process.detach pid