tobias/radicale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ignore hidden files

Browse Source
This commit is contained in:
Unrud 2016-06-10 00:40:54 +02:00 committed by Unrud
parent 063e827588
commit 3479e76690
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
radicale/storage.py
View File

@ -126,7 +126,8 @@ def is_safe_filesystem_path_component(path):
""" """
return ( return (
path and not os.path.splitdrive(path)[0] and path and not os.path.splitdrive(path)[0] and
not os.path.split(path)[0] and path not in (os.curdir, os.pardir)) not os.path.split(path)[0] and path not in (os.curdir, os.pardir) and
not path.startswith(".") and not path.endswith("~"))
def path_to_filesystem(root, *paths): def path_to_filesystem(root, *paths):
@ -346,6 +347,10 @@ class Collection(BaseCollection):
yield collection.get(item[0]) yield collection.get(item[0])
_, directories, _ = next(os.walk(collection._filesystem_path)) _, directories, _ = next(os.walk(collection._filesystem_path))
for sub_path in directories: for sub_path in directories:
if not is_safe_filesystem_path_component(sub_path):
cls.logger.debug(
"Skipping collection: %s", sub_path)
continue
full_path = os.path.join(collection._filesystem_path, sub_path) full_path = os.path.join(collection._filesystem_path, sub_path)
if os.path.exists(full_path): if os.path.exists(full_path):
yield cls(posixpath.join(path, sub_path)) yield cls(posixpath.join(path, sub_path))
@ -395,6 +400,10 @@ class Collection(BaseCollection):
return return
for href in hrefs: for href in hrefs:
if not is_safe_filesystem_path_component(href):
self.logger.debug(
"Skipping component: %s", href)
continue
path = os.path.join(self._filesystem_path, href) path = os.path.join(self._filesystem_path, href)
if not href.endswith(".props") and os.path.isfile(path): if not href.endswith(".props") and os.path.isfile(path):
with open(path, encoding=self.storage_encoding) as fd: with open(path, encoding=self.storage_encoding) as fd: