fix further file names vulnerabilities in TechDraw module

2019-10-03 02:45:38 +02:00
parent e72df35bff
commit 0995ff1318
5 changed files with 45 additions and 18 deletions
--- a/src/Mod/TechDraw/Gui/TaskActiveView.cpp
+++ b/src/Mod/TechDraw/Gui/TaskActiveView.cpp
@@ -135,6 +135,7 @@ TechDraw::DrawViewSymbol* TaskActiveView::createActiveView(void)
    tempFile.close();

    std::string fileSpec = Base::Tools::toStdString(tempFile.fileName());
+    fileSpec = Base::Tools::escapeEncodeFilename(fileSpec);

    //double estScale = 
    Grabber3d::copyActiveViewToSvgFile(appDoc, fileSpec,