update sanitizePath regex

remove accidental inclusion of , and add null char \x00
This commit is contained in:
Brian Gough 2015-02-13 11:28:43 +00:00
parent 80382d5c15
commit 4532cd14b0

View file

@ -76,4 +76,4 @@ module.exports = RequestParser =
_sanitizePath: (path) ->
# See http://php.net/manual/en/function.escapeshellcmd.php
path.replace(/[\#\&\;\`\|\*\?\~\<\>\^\(\)\[\]\{\}\$\\\,\x0A\xFF]/g, "")
path.replace(/[\#\&\;\`\|\*\?\~\<\>\^\(\)\[\]\{\}\$\\\x0A\xFF\x00]/g, "")