Cameron Cordes eccb45ced0 Use Absolutize for files that do not exist ...

Canonicalize relies on the file existing to resolve the potential
traversal, which won't work for file upload in case the file name has a
traversal inside it.

2020-10-17 19:22:55 -04:00

62 KiB

Raw Blame History

View Raw