[Python-modules-commits] r17786 - in packages/sphinx/trunk/debian/dh-sphinxdoc (dh_sphinxdoc)

[jwilk at users.alioth.debian.org]

    Date: Saturday, July 9, 2011 @ 21:01:56
  Author: jwilk
Revision: 17786

dh_sphinxdoc: when scanning for known .js files, ignore symlinks that don't point outside our own directory.

Modified:
  packages/sphinx/trunk/debian/dh-sphinxdoc/dh_sphinxdoc

Modified: packages/sphinx/trunk/debian/dh-sphinxdoc/dh_sphinxdoc
===================================================================
--- packages/sphinx/trunk/debian/dh-sphinxdoc/dh_sphinxdoc	2011-07-09 20:55:19 UTC (rev 17785)
+++ packages/sphinx/trunk/debian/dh-sphinxdoc/dh_sphinxdoc	2011-07-09 21:01:56 UTC (rev 17786)
@@ -74,7 +74,9 @@
             my $md5;
             if (-l $js)
             {
+                # Follow the symlink, but only if points *outside* our own directory.
                 my $js_target = readlink($js);
+                $js_target =~ m{^(/|\Q../../\E)} or return;
                 unless ($js_target =~ m{^/})
                 {
                     $js_target = "$js/../$js_target";