MAGETWO-72052: LFI in Import History

svitja · svitja · commit 93d7b5756918 · 2018-03-13T11:44:06.000+02:00
diff --git a/app/code/Magento/ImportExport/Test/Unit/Controller/Adminhtml/History/DownloadTest.php b/app/code/Magento/ImportExport/Test/Unit/Controller/Adminhtml/History/DownloadTest.php
@@ -153,7 +153,7 @@ public function executeDataProvider()
     {
         return [
             'Normal file name' => ['filename.csv', 'filename.csv'],
-            'Vulnerable file name' => ['../../../../../../../../etc/passwd', 'passwd'],
+            'Relative file name' => ['../../../../../../../../etc/passwd', 'passwd'],
             'Empty file name' => ['', ''],
         ];
     }

Original file line number	Diff line number	Diff line change
`@@ -153,7 +153,7 @@ public function executeDataProvider()`
`153`	`153`	`{`
`154`	`154`	`return [`
`155`	`155`	`'Normal file name' => ['filename.csv', 'filename.csv'],`
`156`		`- 'Vulnerable file name' => ['../../../../../../../../etc/passwd', 'passwd'],`
	`156`	`+ 'Relative file name' => ['../../../../../../../../etc/passwd', 'passwd'],`
`157`	`157`	`'Empty file name' => ['', ''],`
`158`	`158`	`];`
`159`	`159`	`}`