changeset 44:1c0505ce5d6a draft

untaint scheduledir()
author HIROSE Yuuji <yuuji@gentei.org>
date Wed, 30 May 2012 11:49:20 +0900
parents 7874392b872d
children 1b16890d61d6
files after5.rb
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/after5.rb	Tue May 08 00:09:03 2012 +0900
+++ b/after5.rb	Wed May 30 11:49:20 2012 +0900
@@ -4,7 +4,7 @@
 # Associative Scheduling Table - after5
 # (C)2003, 2004, 2006, 2008, 2012 by HIROSE Yuuji [yuuji<at>gentei.org]
 # $Id: after5.rb,v 1.19 2012/04/01 11:52:25 yuuji Exp yuuji $
-# Last modified Tue May  8 00:08:34 2012 on firestorm
+# Last modified Wed May 30 11:47:39 2012 on firestorm
 # See http://www.gentei.org/~yuuji/software/after5/
 # このスクリプトはEUCで保存してください。
 $hgid = <<_HGID_.split[1..-2].join(" ")
@@ -603,7 +603,7 @@
 
   def scheduledir(user, y, m, d, time)
     sprintf("%s/%04d/%02d/%02d/%04d/%s",
-	    @dir, y.to_i, m.to_i, d.to_i, time.to_i, user)
+	    @dir, y.to_i, m.to_i, d.to_i, time.to_i, user).untaint
   end
   def schedulefile(user, y, m, d, time)
     File.join(scheduledir(user, y, m, d, time), @schedulefile)

yatex.org