jsxgraph 1.13.2 → 1.13.3

package/src/unused/server/fft.py

@@ -107,6 +107,12 @@ class FFT(JXGServerModule):
     def makeAudio(self, resp, type, samplerate, data):
         fname = '/tmp/'+str(uuid.uuid4())
         fogg = fname + '.ogg'
+        # Validate that the generated paths are confined to the expected
+        # temp directory before they are passed to the external oggenc
+        # binary, guarding against path/argument manipulation.
+        tmp_dir = os.path.abspath('/tmp') + os.sep
+        if not os.path.abspath(fname).startswith(tmp_dir) or not os.path.abspath(fogg).startswith(tmp_dir):
+            raise ValueError('Invalid audio file path')
         w = wave.open(fname, 'w')
         w.setnchannels(1)
         w.setsampwidth(2)

package/src/utils/type.js

@@ -1492,12 +1492,15 @@ JXG.extend(
 
             len = arguments.length;
             // Old code: if (len < 3 || primitives[s]) {
+            // Challenge: climb up the inheritance chain up to
+            // primitive elements
             // If len > 3, the element is certainly not a primitive object,
             // e.g. copyAttributes(attributes, JXG.Options, 'line', 'point1').
             // That is, a later create('point', ...) will be the primitive call.
             // This will not yet cover all cases of inheritance.
+
             if (len < 3 || (len === 3 && primitives[s])) {
-                // Default options from Options.elements
+                // Jump directly to default options from Options.elements
                 a = JXG.deepCopy(options.elements, null, true);
             } else {
                 a = {};