mirrors/pferd
1
0
Fork 0
mirror of https://github.com/Garmelon/PFERD.git synced 2023-12-21 10:23:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix resolve_path allowing paths outside its folder

Browse Source 
This happened if the directory name was a prefix of the offending file name.
This commit is contained in:
I-Al-Istannen 2020-04-20 16:07:14 +02:00
parent 63bbcad918
commit 135a8dce4b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
PFERD/utils.py
View File

@ -67,7 +67,7 @@ def resolve_path(directory: Path, target_file: Path) -> Path:
""" """
absolute_path = directory.joinpath(target_file).resolve() absolute_path = directory.joinpath(target_file).resolve()
if not str(absolute_path).startswith(str(directory.resolve())): if directory not in absolute_path.parents:
raise ResolveException( raise ResolveException(
f"Path resolved to file outside folder ({absolute_path})" f"Path resolved to file outside folder ({absolute_path})"
) )