From 3b24f99ac4ddb7f9072076b0d07f0b1a408f177a Mon Sep 17 00:00:00 2001
From: Allan Jardine <allan.jardine@sprymedia.co.uk>
Date: Wed, 12 Apr 2017 20:00:44 +0100
Subject: [PATCH] Fix - examples: Tighten up regex check to protect against LFI
 vulnerability

Credit to Arnaud Labenne of Dotsafe.fr for finding and reporting this.
---
 .datatables-commit-sync         | 2 +-
 examples/resources/examples.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.datatables-commit-sync b/.datatables-commit-sync
index 874770b5..60f03e5d 100644
--- a/.datatables-commit-sync
+++ b/.datatables-commit-sync
@@ -1 +1 @@
-98b54ed7a2e4ee6b8156d01f398dfa50d7d5c475
+b321f136f34e595f3c3a7ea9fef6888cc2fa87f7
diff --git a/examples/resources/examples.php b/examples/resources/examples.php
index 303d3bdb..98dceb26 100644
--- a/examples/resources/examples.php
+++ b/examples/resources/examples.php
@@ -1,6 +1,6 @@
 <?php
 
-if ( isset( $_POST['src'] ) && preg_match( '/scripts\/[a-zA-Z_\-_]+\.php/', $_POST['src'] ) !== 0 ) {
+if ( isset( $_POST['src'] ) && preg_match( '/^scripts\/[a-zA-Z_\-_]+\.php$/', $_POST['src'] ) !== 0 ) {
 	echo htmlspecialchars( file_get_contents( '../server_side/'.$_POST['src'] ) );
 }
 else {