Index: openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl,v
diff -u -N -r1.153.2.29 -r1.153.2.30
--- openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl	5 Jan 2021 17:10:17 -0000	1.153.2.29
+++ openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl	1 Feb 2021 10:51:09 -0000	1.153.2.30
@@ -1372,7 +1372,7 @@
     # Sub out funky characters in the pathname, so the user can't request
     # http://www.arsdigita.com/*/index (causing a potentially expensive glob
     # and bypassing registered procedures)!
-    regsub -all {[^0-9a-zA-Z_/:.]} $path {\\&} path_glob
+    regsub -all -- {[^0-9a-zA-Z_/:.]} $path {\\&} path_glob
 
     # Grab a list of all available files with extensions.
     set files [glob -nocomplain "$path_glob$extension_pattern"]