In testing this locally, I found that the original attached foo.metalink file was malformed beyond the directory traversal issue which after patching would fail, but not because of the directory traversal check. Attached is a properly formed metalink file excepting the directory traversal.
In testing this locally, I found that the original attached foo.metalink file was malformed beyond the directory traversal issue which after patching would fail, but not because of the directory traversal check. Attached is a properly formed metalink file excepting the directory traversal.