kindred/create
1
1
Fork 0
Code Issues 30 Pull Requests Actions Packages Projects 9 Releases 2 Wiki Activity

fix further file names vulnerabilities in modules

Browse Source
This commit is contained in:
wmayer
2019-10-03 02:37:25 +02:00
parent f9ca1b18a4
commit 3aa0432425
3 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/Mod/Import/Gui/Command.cpp
View File

@@ -26,6 +26,7 @@
#endif
#include <Base/Exception.h>
#include <base/Tools.h>
#include <App/Document.h>
#include <Gui/Application.h>
#include <Gui/MainWindow.h>
@@ -63,6 +64,7 @@ void FCCmdImportReadBREP::activated(int iMsg)
return;
}
fn = Base::Tools::escapeEncodeFilename(fn);
doCommand(Doc,"TopoShape = Import.ReadBREP(\"%s\")",(const char*)fn.toUtf8());
commitCommand();
}
@@ -97,6 +99,7 @@ void ImportStep::activated(int iMsg)
if (!fn.isEmpty()) {
openCommand("Part ImportSTEP Create");
doCommand(Doc,"f = App.document().addObject(\"ImportStep\",\"ImportStep\")");
fn = Base::Tools::escapeEncodeFilename(fn);
doCommand(Doc,"f.FileName = \"%s\"",(const char*)fn.toUtf8());
commitCommand();
updateActive();
@@ -136,6 +139,7 @@ void ImportIges::activated(int iMsg)
if (!fn.isEmpty()) {
openCommand("ImportIGES Create");
doCommand(Doc,"f = App.document().addObject(\"ImportIges\",\"ImportIges\")");
fn = Base::Tools::escapeEncodeFilename(fn);
doCommand(Doc,"f.FileName = \"%s\"",(const char*)fn.toUtf8());
commitCommand();
updateActive();