Raise exception on invalid path

2017-02-19 00:51:47 +01:00 · 2017-02-19 00:51:47 +01:00 · 45e2b350a9
commit 45e2b350a9
parent 22059e71a2
1 changed files with 3 additions and 0 deletions
--- a/src/Ui/UiRequest.py
+++ b/src/Ui/UiRequest.py
@ -330,6 +330,9 @@ class UiRequest(object):
        if path.endswith("/"):
            path = path + "index.html"

+        if ".." in path:
+            raise Exception("Invalid path")
+
        match = re.match("/media/(?P<address>[A-Za-z0-9\._-]+)/(?P<inner_path>.*)", path)
        if match:
            path_parts = match.groupdict()