mirrors/pferd
1
0
Fork 0
mirror of https://github.com/Garmelon/PFERD.git synced 2025-07-12 22:22:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Sanitize slashes in exercise container names

Browse Source
This commit is contained in:
I-Al-Istannen
2024-10-21 16:28:49 +02:00
parent 4f9e2ab48d
commit f9bb2e41cf
3 changed files with 29 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
PFERD/crawl/ilias/ilias_web_crawler.py
View File

@ -328,6 +328,9 @@ instance's greatest bottleneck.
)
self._visited_urls[element.url] = parent_path
# element.name might contain `/` if the crawler created nested elements,
# so we can not sanitize it here. We trust in the output dir to thwart worst-case
# directory escape attacks.
element_path = PurePath(parent_path, element.name)
if element.type in _VIDEO_ELEMENTS: