Mercurial > moin > 1.9

changeset 5364:0a2d5a05cd9b

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
xmlrpc: process attachname in delete Attachment similiar to get and put
author Reimar Bauer <rb.proj AT googlemail DOT com>
date Tue, 08 Dec 2009 19:36:20 +0100
parents c3b6639e101a
children dcc0d7a5fcf4 f0915c23ce44
files MoinMoin/xmlrpc/__init__.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/MoinMoin/xmlrpc/__init__.py	Tue Dec 08 19:34:07 2009 +0100
+++ b/MoinMoin/xmlrpc/__init__.py	Tue Dec 08 19:36:20 2009 +0100
@@ -1063,7 +1063,7 @@
         if not self.request.user.may.delete(pagename):
             return xmlrpclib.Fault(1, 'You are not allowed to delete attachments on this page.')
 
-        attachname = wikiutil.taintfilename(attachname)
+        attachname = wikiutil.taintfilename(self._instr(attachname))
         filename = AttachFile.getFilename(self.request, pagename, attachname)
         AttachFile.remove_attachment(self.request, pagename, attachname)
         return xmlrpclib.Boolean(1)