will be shut down on June 1, 2019. At that point this instance will be unreachable and all data will be irrevocably deleted. More details at

Commit d264db61 authored by Evan Prodromou's avatar Evan Prodromou

fix local file include vulnerability in doc.php


parent 779204b1
......@@ -54,6 +54,9 @@ class DocAction extends Action
$this->title = $this->trimmed('title');
if (!preg_match('/^[a-zA-Z0-9_-]*$/', $this->title)) {
$this->title = 'help';
$this->output = null;
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment