Re: [Flightgear-devel] Nasal security

[Rebecca N. P. <reb...@zo...>]

Looks like Windows realpath() converts / to \, which makes this an 
easily solved problem:

diff --git a/src/Main/util.cxx b/src/Main/util.cxx
index 40d3244..d6be946 100644
--- a/src/Main/util.cxx
+++ b/src/Main/util.cxx
@@ -216,6 +216,9 @@ std::string fgValidatePath
          normed_path2 = SGPath(path2.dir()).realpath()
              + "/" + path2.file();
      }
+#if defined(_MSC_VER) || defined(_WIN32)
+     normed_path2 = SGPath(normed_path2).str(); // convert \ to /
+#endif

      // Check
      if (fgValidatePath_internal(normed_path1, write).empty() ||

> The situation could be a lot worse at the end of the month as Microsoft are
> making a free "upgrade" to Windows 10 available to Windows 7 and Windows 8
> users. Every new Windows release seems to involve an "improvement" to file
> security.
Probably not: this message is coming from our security check, not theirs.