0
0
mirror of https://github.com/PHPMailer/PHPMailer.git synced 2024-09-20 01:52:15 +02:00
This commit is contained in:
Marcus Bointon 2020-11-14 21:39:08 +01:00
parent 78bda9997d
commit 25ad471dea
No known key found for this signature in database
GPG Key ID: DE31CD6EB646AA24

View File

@ -4078,7 +4078,7 @@ class PHPMailer
continue;
}
if (
// Only process relative URLs if a basedir is provided (i.e. no absolute local paths)
// Only process relative URLs if a basedir is provided (i.e. no absolute local paths)
!empty($basedir)
// Ignore URLs containing parent dir traversal (..)
&& (strpos($url, '..') === false)