X-Git-Url: http://git.plutz.net/?p=shcgi;a=blobdiff_plain;f=index.cgi;h=f35a5bde73275203b6df7eef4bed996166cc46d7;hp=92ccfd618583b874c3af61879b6b3c6287a2aec8;hb=67bf6b2b7de1bca9625626a31e5db60d59ad7b7c;hpb=456423f02f12ac71d2d14e1abf959dafdc5eb041

diff --git a/index.cgi b/index.cgi
index 92ccfd6..f35a5bd 100755
--- a/index.cgi
+++ b/index.cgi
@@ -40,7 +40,7 @@ _EXEC="${real%/shcgi/index.cgi}"  #execution directory
 
   PAGE=$(validate   "${PAGE:-${_GET[page]}}"   '[a-zA-Z0-9_-]+' '')
 ACTION=$(validate "${ACTION:-${_GET[action]}}" '[a-zA-Z0-9_-]+' '')
-STATIC=$(validate "${STATIC:-${_GET[static]}}" '[^\.]+' '')
+STATIC=$(invalidate "${STATIC:-${_GET[static]}}" '(^|.*/)\.\./.*' '')
 
 if   [ -n "$PAGE"   -a -x "${_EXEC}/pages/${PAGE}.sh" ]; then
   . "$_EXEC/shcgi/page.sh"