mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-26 22:39:10 -04:00
Removed check as input value is compared against dataset of validated values, and request is only processed further in case of a match. => this is unnecessary
This commit is contained in:
@@ -44,11 +44,6 @@ class File_Proxy_Controller extends Controller {
|
||||
|
||||
$file_uri = substr($request_uri, strlen($var_uri));
|
||||
|
||||
// Make sure that we don't leave the var dir
|
||||
if (strpos($file_uri, "/../") !== false) {
|
||||
throw new Kohana_404_Exception();
|
||||
}
|
||||
|
||||
list ($type, $path) = explode("/", $file_uri, 2);
|
||||
if ($type != "resizes" && $type != "albums" && $type != "thumbs") {
|
||||
throw new Kohana_404_Exception();
|
||||
|
||||
Reference in New Issue
Block a user