Mercurial > hgrepos > hgweb.cgi > after5
changeset 44:1c0505ce5d6a draft
untaint scheduledir()
author | HIROSE Yuuji <yuuji@gentei.org> |
---|---|
date | Wed, 30 May 2012 11:49:20 +0900 |
parents | 7874392b872d |
children | 1b16890d61d6 |
files | after5.rb |
diffstat | 1 files changed, 2 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/after5.rb Tue May 08 00:09:03 2012 +0900 +++ b/after5.rb Wed May 30 11:49:20 2012 +0900 @@ -4,7 +4,7 @@ # Associative Scheduling Table - after5 # (C)2003, 2004, 2006, 2008, 2012 by HIROSE Yuuji [yuuji<at>gentei.org] # $Id: after5.rb,v 1.19 2012/04/01 11:52:25 yuuji Exp yuuji $ -# Last modified Tue May 8 00:08:34 2012 on firestorm +# Last modified Wed May 30 11:47:39 2012 on firestorm # See http://www.gentei.org/~yuuji/software/after5/ # このスクリプトはEUCで保存してください。 $hgid = <<_HGID_.split[1..-2].join(" ") @@ -603,7 +603,7 @@ def scheduledir(user, y, m, d, time) sprintf("%s/%04d/%02d/%02d/%04d/%s", - @dir, y.to_i, m.to_i, d.to_i, time.to_i, user) + @dir, y.to_i, m.to_i, d.to_i, time.to_i, user).untaint end def schedulefile(user, y, m, d, time) File.join(scheduledir(user, y, m, d, time), @schedulefile)