htwkmooc/codeocean
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disallow leading / in zip archives

Browse Source
This commit is contained in:
Sebastian Serth
2022-08-18 16:45:15 +02:00
parent 3248bd74d1
commit acc07ffa5d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/submissions_controller.rb
View File

@ -27,7 +27,7 @@ class SubmissionsController < ApplicationController
stringio = Zip::OutputStream.write_buffer do |zio| stringio = Zip::OutputStream.write_buffer do |zio|
@files.each do |file| @files.each do |file|
zio.put_next_entry(file.filepath) zio.put_next_entry(file.filepath.delete_prefix('/'))
zio.write(file.content.presence || file.native_file.read) zio.write(file.content.presence || file.native_file.read)
end end