Security update for Core, with self-updated composer

[yaffs-website] / vendor / drush / drush / commands / runserver / d7-rs-router.php

diff --git a/vendor/drush/drush/commands/runserver/d7-rs-router.php b/vendor/drush/drush/commands/runserver/d7-rs-router.php
index c82e05bfd2c2d050d5e744c7a6d8591cf8a0e2c4..26095de8b9299e746f7fccef84e3e42e016f21c9 100644 (file)
--- a/vendor/drush/drush/commands/runserver/d7-rs-router.php
+++ b/vendor/drush/drush/commands/runserver/d7-rs-router.php
@@ -46,7 +46,7 @@ function runserver_env($key) {
 }
 
 $url = parse_url($_SERVER["REQUEST_URI"]);
-if (file_exists('.' . $url['path'])) {
+if (file_exists('.' . urldecode($url['path']))) {
   // Serve the requested resource as-is.
   return FALSE;
 }