diff --git a/src/Ui/UiRequest.py b/src/Ui/UiRequest.py index 48c56c61..efb29841 100644 --- a/src/Ui/UiRequest.py +++ b/src/Ui/UiRequest.py @@ -424,7 +424,7 @@ class UiRequest(object): if ".." in path or "./" in path: raise SecurityError("Invalid path") - match = re.match("/media/(?P
[A-Za-z0-9\._-]+)(?P/.*|$)", path) + match = re.match("/media/(?P
[A-Za-z0-9]+[A-Za-z0-9\._-]+)(?P/.*|$)", path) if match: path_parts = match.groupdict() path_parts["request_address"] = path_parts["address"] # Original request address (for Merger sites)