# HG changeset patch
# User HIROSE Yuuji <yuuji@gentei.org>
# Date 1338346160 -32400
# Node ID 1c0505ce5d6a250fb0c104a8a9c0d170c254e949
# Parent  7874392b872dde5213e0b59cd15e7484897eb661
untaint scheduledir()

diff -r 7874392b872d -r 1c0505ce5d6a after5.rb
--- a/after5.rb	Tue May 08 00:09:03 2012 +0900
+++ b/after5.rb	Wed May 30 11:49:20 2012 +0900
@@ -4,7 +4,7 @@
 # Associative Scheduling Table - after5
 # (C)2003, 2004, 2006, 2008, 2012 by HIROSE Yuuji [yuuji<at>gentei.org]
 # $Id: after5.rb,v 1.19 2012/04/01 11:52:25 yuuji Exp yuuji $
-# Last modified Tue May  8 00:08:34 2012 on firestorm
+# Last modified Wed May 30 11:47:39 2012 on firestorm
 # See http://www.gentei.org/~yuuji/software/after5/
 # このスクリプトはEUCで保存してください。
 $hgid = <<_HGID_.split[1..-2].join(" ")
@@ -603,7 +603,7 @@
 
   def scheduledir(user, y, m, d, time)
     sprintf("%s/%04d/%02d/%02d/%04d/%s",
-	    @dir, y.to_i, m.to_i, d.to_i, time.to_i, user)
+	    @dir, y.to_i, m.to_i, d.to_i, time.to_i, user).untaint
   end
   def schedulefile(user, y, m, d, time)
     File.join(scheduledir(user, y, m, d, time), @schedulefile)