From 623aed38b54caf9dd4c992142661c98018224761 Mon Sep 17 00:00:00 2001 From: Mael Clerambault Date: Sun, 27 May 2012 23:17:39 +0200 Subject: [PATCH] Do not add a / to empty path in 'path_traversal' --- rack-protection/lib/rack/protection/path_traversal.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rack-protection/lib/rack/protection/path_traversal.rb b/rack-protection/lib/rack/protection/path_traversal.rb index 8f087ee3..e78c4b2d 100644 --- a/rack-protection/lib/rack/protection/path_traversal.rb +++ b/rack-protection/lib/rack/protection/path_traversal.rb @@ -12,7 +12,7 @@ module Rack class PathTraversal < Base def call(env) path_was = env["PATH_INFO"] - env["PATH_INFO"] = cleanup path_was if path_was + env["PATH_INFO"] = cleanup path_was if path_was && !path_was.empty? app.call env ensure env["PATH_INFO"] = path_was