path.php

<?php
namespace Bitrix\Security\Filter\Auditor;
 
class Path
    extends Base
{
    protected $name = 'PHP';
 
    protected function getFilters()
    {
        $filters = array();
        $filters['#((?:[\\\/]|%2f|%5c)(?:\.|%2e))((?:\.|%2e)(?:[\\\/]|%2f|%5c))#is'] = $this->getSplittingString(2);
        if(
            (!defined('PHP_OS'))
            || (mb_strtoupper(mb_substr(PHP_OS, 0, 3)) === 'WIN')
        )
        {
            $slashes = '\\\/\x20\x22\x3c\x3e\x5c';
        }
        else
        {
            $slashes = '\\\/';
        }
 
        $filters['#(?:\.['.$slashes.']+){30,}#'] = ' X ';
 
        $result = array(
            'search' => array_keys($filters),
            'replace' => $filters
            );
        return $result;
    }
 
}