#4844: File Inspector: Do not traverse above the base directory

Fixes: #4844
e107inc · Aug 8, 2022 · 015598f · 015598f
1 parent fd45424
commit 015598f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/e107_admin/fileinspector.php b/e107_admin/fileinspector.php
@@ -601,7 +601,11 @@ private function inspect_existing($baseDir)
         $absoluteBase = realpath($baseDir);
         if (!is_dir($absoluteBase)) return;
 
-        $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($baseDir));
+        $iterator = new RecursiveIteratorIterator(
+			new RecursiveDirectoryIterator(
+				$baseDir, FilesystemIterator::SKIP_DOTS
+			)
+        );
         foreach ($iterator as $file)
         {
             $this->sendProgress(1);