SecurityInnovation/TMContentReview — Issue #81: Filter All User-Supplied Filename and Path Input
Author: SergeTruth
Created: 2011-11-07 22:39:08+00:00
State: open

A new line needs to be added to
"d:\myapp\temp\..\temp\file.datd:\myapp\temp\..\temp\..\temp\file.datd%3A%5Cmyapp%5Ctemp%5Cfile.dat"

If the follow regular expression valid?
d:(\\\\|/)myapp(\\\\|/)temp(\\\\|/)(\\w|\\s|\\.|-|){1,20}
The the last "|" after "-".