From: cristy Date: Mon, 19 May 2014 13:21:00 +0000 (+0000) Subject: (no commit message) X-Git-Tag: 7.0.1-0~2304 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=82b2f0f9413a31d96948f422ffe7bfc6500d0b6e;p=imagemagick --- diff --git a/MagickCore/delegate.c b/MagickCore/delegate.c index 8cf87464e..17757f434 100644 --- a/MagickCore/delegate.c +++ b/MagickCore/delegate.c @@ -906,8 +906,8 @@ static char *SanitizeDelegateCommand(const char *command) static char whitelist[] = - "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-" - ".@&;<>|\\\'\":%"; + "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_- " + ".@&;<>|/\\\'\":%"; sanitize_command=AcquireString(command); p=sanitize_command; diff --git a/MagickCore/utility.c b/MagickCore/utility.c index 78aa53c34..dedbfca6d 100644 --- a/MagickCore/utility.c +++ b/MagickCore/utility.c @@ -1930,8 +1930,8 @@ static char *SanitizeSystemCommand(const char *command) static char whitelist[] = - "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-" - ".@&;<>|\\\'\":%"; + "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_- " + ".@&;<>|/\\\'\":%"; sanitize_command=AcquireString(command); p=sanitize_command;