Commit bc444bb47c81da7623b2ea4021b29abb4a69e265:
use untainted version of name
Branch: refs/heads/master
Author: Sam Ruby <[email protected]>
Committer: Sam Ruby <[email protected]>
Pusher: rubys <[email protected]>
------------------------------------------------------------
www/secmail/models/mailbox.rb | + -
------------------------------------------------------------
2 changes: 1 additions, 1 deletions.
------------------------------------------------------------
diff --git a/www/secmail/models/mailbox.rb b/www/secmail/models/mailbox.rb
index 9091ec7..095767c 100644
--- a/www/secmail/models/mailbox.rb
+++ b/www/secmail/models/mailbox.rb
@@ -40,8 +40,8 @@ def initialize(name)
name = File.basename(name, '.yml')
if name =~ /^\d+$/
- @mbox = Dir["#{ARCHIVE}/#{name}", "#{ARCHIVE}/#{name}.gz"].first.untaint
@name = name.untaint
+ @mbox = Dir["#{ARCHIVE}/#{@name}",
"#{ARCHIVE}/#{@name}.gz"].first.untaint
else
@name = name.split('.').first
@mbox = "#{ARCHIVE}/#{name}"
