security fix - remove '/' from channel and meetingname

darcs-hash:20090625202854-82ea9-69dc7280273802b0e7c77e2e7c3e623c037574bc.gz

1 files changed, 2 insertions, 3 deletions

diff --git a/meeting.py b/meeting.py
index 65aded1..0b9aa7b 100644
--- a/meeting.py
+++ b/meeting.py
@@ -95,13 +95,12 @@ class Config(object):
         # Certain test channels always get the same name - don't need
         # file prolifiration for them
         if self.M.channel in self.specialChannels:
-            # mask global!!
             pattern = self.specialChannelFilenamePattern
         else:
             pattern = self.filenamePattern
-        channel = self.M.channel.strip('# ').lower()
+        channel = self.M.channel.strip('# ').lower().replace('/', '')
         if self.M._meetingname:
-            meetingname = self.M._meetingname
+            meetingname = self.M._meetingname.replace('/', '')
         else:
             meetingname = channel
         path = pattern%locals()