[Toolserver-l] Announcement - XSaLT: XSL/XSLT Simple and Lightweight Tool

[DaB.]

Hello,
At Monday 12 September 2011 13:41:09 DaB. wrote:
> Sorry that answer confuses me; "check that xslt is only composed by
> alphanumeric characters" is just a second (more paranoid) check to be
> very sure?

to prevent something like

"../../dab/text.xml" as parameter with would result in 

"/home/drtrigon/xslt/"../../dab/text.xml" which would result to

"/home/dab/text.xml"

Sincerly,
DaB.

-- 
Userpage: [[:w:de:User:DaB.]] — PGP: 2B255885
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
Url : http://lists.wikimedia.org/pipermail/toolserver-l/attachments/20110912/e6a793e6/attachment.pgp