tobias/radicale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Windows: Block alternate data streams

Browse Source
This commit is contained in:
Unrud 2022-03-30 22:26:02 +02:00
parent 0baf1dc908
commit 3c218ecd9c
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
radicale/pathutils.py
View File

@ -257,6 +257,7 @@ def is_safe_filesystem_path_component(path: str) -> bool:
""" """
return ( return (
bool(path) and not os.path.splitdrive(path)[0] and bool(path) and not os.path.splitdrive(path)[0] and
(sys.platform != "win32" or ":" not in path) and # Block NTFS-ADS
not os.path.split(path)[0] and path not in (os.curdir, os.pardir) and not os.path.split(path)[0] and path not in (os.curdir, os.pardir) and
not path.startswith(".") and not path.endswith("~") and not path.startswith(".") and not path.endswith("~") and
is_safe_path_component(path)) is_safe_path_component(path))