[Erp5-report] r9499 - /erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py

[nobody at svn.erp5.org]

Author: chris
Date: Mon Aug 28 14:16:21 2006
New Revision: 9499

URL: http://svn.erp5.org?rev=9499&view=rev
Log:
- Fixed security hole in ERP5Subversion

Modified:
    erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py

Modified: erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py
URL: http://svn.erp5.org/erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py?rev=9499&r1=9498&r2=9499&view=diff
==============================================================================
--- erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py (original)
+++ erp5/trunk/products/ERP5Subversion/Tool/SubversionTool.py Mon Aug 28 14:16:21 2006
@@ -618,7 +618,7 @@
   def fileHTML(self, business_template, file_path):
     """ Display a file content in HTML with syntax highlighting
     """
-    file_path = self.relativeToAbsolute(file_path, business_template)
+    file_path = self._getWorkingPath(self.relativeToAbsolute(file_path, business_template))
     if os.path.exists(file_path):
       if os.path.isdir(file_path):
         text = "<span style='font-weight: bold; color: black;'>"+file_path+"</span><hr/>"