aboutsummaryrefslogtreecommitdiffstats
path: root/core/js/jquery-tipsy.js
diff options
context:
space:
mode:
authorLukas Reschke <lukas@statuscode.ch>2013-01-13 14:33:19 +0100
committerLukas Reschke <lukas@statuscode.ch>2013-01-13 14:33:19 +0100
commite151210a62a1fbe9fb885bd1dbb51315bd820e03 (patch)
tree122d4d8550ae273c1177451f59074ccbaedeb78e /core/js/jquery-tipsy.js
parent981fd5e4249d6bda0f8a06d86055ede896cdc9da (diff)
downloadnextcloud-server-e151210a62a1fbe9fb885bd1dbb51315bd820e03.tar.gz
nextcloud-server-e151210a62a1fbe9fb885bd1dbb51315bd820e03.zip
Simplify the isSubDirectory() function
isSubDirectory() checks if a specified $sub is a subdirectory of the $parent, this is needed to prevent file inclusions. Actually, the current code is more kind of a "hack" which I always struggle over if browsing through source. So this should be a much better implementation. The implementation is really straightforward: - [realpath()](http://php.net/manual/function.realpath.php) expands all symbolic links and resolves references to '/./', '/../' and extra '/' characters in the input path and return the canonicalized absolute pathname. - [strpos()](php.net/manual/function.strpos.php) returns FALSE if the substring wasn't found. Since this is an absolutely critical piece of code, I'd like to ensure that this is absolutely safe!
Diffstat (limited to 'core/js/jquery-tipsy.js')
0 files changed, 0 insertions, 0 deletions