UploadedFile: vérifie dans setPath que $path ne pointe pas en dehors du répertoire.

Entity/UploadedFile.php

@@ -151,7 +151,10 @@ class UploadedFile
      */
     public function setPath($path)
     {
-        $this->path = $path;
+        if(!static::isSafePath($path)) {
+            throw new InvalidArgumentException("Unsafe path: $path");
+        }
+        $this->path = trim($path, '/');
 
         return $this;
     }
@@ -495,4 +498,30 @@ class UploadedFile
     {
         return fwrite($filehandle, $maxlen);
     }
+
+    /** Vérifie si
+     *
+     * @param string $path
+     * @return boolean
+     */
+    public static function isSafePath($path)
+    {
+        $parts = explode('/', trim($path, '/'));
+        $level = 0;
+        foreach($parts as $part) {
+            switch($part) {
+                case '.':
+                    break;
+                case '..':
+                    $level--;
+                    if($level < 0) {
+                        return false;
+                    }
+                    break;
+                default:
+                    $level++;
+            }
+        }
+        return true;
+    }
 }