oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Raise exception on invalid path

Browse source
This commit is contained in:
shortcutme 2017-02-19 00:51:47 +01:00
parent 22059e71a2
commit 45e2b350a9
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/Ui/UiRequest.py
View file

@ -330,6 +330,9 @@ class UiRequest(object):
if path.endswith("/"): if path.endswith("/"):
path = path + "index.html" path = path + "index.html"
if ".." in path:
raise Exception("Invalid path")
match = re.match("/media/(?P<address>[A-Za-z0-9\._-]+)/(?P<inner_path>.*)", path) match = re.match("/media/(?P<address>[A-Za-z0-9\._-]+)/(?P<inner_path>.*)", path)
if match: if match:
path_parts = match.groupdict() path_parts = match.groupdict()