Prevent leakage of information about anonymous user's homedir
via 'QUOTE CWD'. Reviewed by: des
This commit is contained in:
parent
32704e5747
commit
3fbaa839f9
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=69234
@ -500,8 +500,12 @@ cmd
|
||||
}
|
||||
| CWD check_login CRLF
|
||||
{
|
||||
if ($2)
|
||||
cwd(pw->pw_dir);
|
||||
if ($2) {
|
||||
if (guest)
|
||||
cwd("/");
|
||||
else
|
||||
cwd(pw->pw_dir);
|
||||
}
|
||||
}
|
||||
| CWD check_login SP pathname CRLF
|
||||
{
|
||||
|
Loading…
Reference in New Issue
Block a user