Skip to content
This repository has been archived by the owner on Sep 4, 2024. It is now read-only.

Commit

Permalink
Add more filters templates that are not in the right directory.
Browse files Browse the repository at this point in the history
  • Loading branch information
noaaroland committed Aug 1, 2022
1 parent e56eb5f commit 42d0c57
Showing 1 changed file with 4 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -410,7 +410,10 @@ public boolean validateTemplates(HttpServletRequest request) {
if ( value != null ) {
for (int i = 0; i < value.length; i++) {
String v = value[i];
if (v.toLowerCase().contains(">") || v.toLowerCase().contains("<") || v.toLowerCase().contains("script")) {
if (v.toLowerCase().contains(">") ||
v.toLowerCase().contains("<") ||
v.toLowerCase().contains("script") ||
v.toLowerCase().contains("..") ) {
return false;
}
}
Expand Down

0 comments on commit 42d0c57

Please sign in to comment.