Make check for .. more specific.

A `..` anywhere in the classname is invalid.
This commit is contained in:
mark_story 2013-07-02 17:28:28 -04:00
parent 726738308e
commit 36d8473215

View file

@ -535,7 +535,7 @@ class App {
if (!isset(self::$_classMap[$className])) {
return false;
}
if (strpos($className, '..')) {
if (strpos($className, '..') !== false) {
return false;
}