Validates user control directory in assembly browser

2012-04-24 11:10:30 -02:00
parent ebb3915fc9
commit f11599f95f
1 changed files with 3 additions and 0 deletions
--- a/umbraco/presentation/umbraco/developer/Macros/assemblyBrowser.aspx.cs
+++ b/umbraco/presentation/umbraco/developer/Macros/assemblyBrowser.aspx.cs
@@ -41,6 +41,9 @@ namespace umbraco.developer
                    isUserControl = true;
                    string fileName = Request.QueryString["fileName"];

+                    IOHelper.ValidateEditPath(fileName, SystemDirectories.Usercontrols);
+
+
                    if (System.IO.File.Exists(IOHelper.MapPath("~/" + fileName)))
                    {
                        UserControl oControl = (UserControl)LoadControl(@"~/" + fileName);