will be shut down on June 1, 2019. At that point this instance will be unreachable and all data will be irrevocably deleted. More details at

Commit 57d8f22a authored by Evan Prodromou's avatar Evan Prodromou

fix local file include vulnerability in doc.php


parent f9cb1c32
......@@ -54,6 +54,9 @@ class DocAction extends Action
$this->title = $this->trimmed('title');
if (!preg_match('/^[a-zA-Z0-9_-]*$/', $this->title)) {
$this->title = 'help';
$this->output = null;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment