oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #2160 from imachug/patch-1

Browse source 
Allow files with `..` as a name substring
This commit is contained in:
ZeroNet 2019-08-19 13:35:29 +02:00 committed by GitHub
commit c7822ed6e6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/Content/ContentManager.py
View file

@ -595,7 +595,7 @@ class ContentManager(object):
return back
def isValidRelativePath(self, relative_path):
if ".." in relative_path:
if ".." in relative_path.replace("\\", "/").split("/"):
return False
elif len(relative_path) > 255:
return False