fixup.sh: Disallow also paths beginning with /
authorPetr Baudis <pasky@suse.cz>
Fri, 2 Mar 2012 16:33:55 +0000 (2 17:33 +0100)
committerPetr Baudis <pasky@suse.cz>
Fri, 2 Mar 2012 16:33:55 +0000 (2 17:33 +0100)
fixupd/fixup.sh

index c9ce5f3..8b30db9 100755 (executable)
@@ -11,9 +11,9 @@ proj="$1"
 groupfile="$2"
 mirror_user="$3"
 
-# disallow paths containing ../
+# disallow suspicious paths
 case "$proj" in
-       *../*)
+       /* | *..*)
                echo "Invalid path" >&2
                exit 1
                ;;