1.1 --- a/mpsplit.pl	Mon Jul 20 18:09:20 2015 +0900
     1.2 +++ b/mpsplit.pl	Sat Jun 16 13:43:32 2018 +0900
     1.3 @@ -1,6 +1,9 @@
     1.4  #!/usr/bin/env perl
     1.5  $sep = "--" . $ARGV[0];
     1.6  $dir = ($ARGV[1] || "tmp");
     1.7 +if ($dir =~ /^([^<>\;\&]*)$/) {
     1.8 +  $dir = $1;
     1.9 +}
    1.10  
    1.11  #print "sep=".$sep, "dir=$dir\n";
    1.12  #binmode STDIN;
    1.13 @@ -23,7 +26,10 @@
    1.14    $name = $2;
    1.15    #print "name=$name\n";
    1.16    if ($header =~ /filename=(['\"]?)(.*?)\1/ && $2 gt "") {
    1.17 -    $fn = $2;
    1.18 +    $fn=$2;
    1.19 +    if ($fn =~ /^([^\/]*)$/) {
    1.20 +      $fn = $1;
    1.21 +    }
    1.22      open(OUT, ">$dir/$fn");
    1.23        print OUT $body;
    1.24      close(OUT);