tobias/radicale
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Duplicate code: Use is_safe_path_component

Browse Source
This commit is contained in:
Unrud 2016-09-04 12:53:07 +02:00
parent 8d5f2ded42
commit a4a6a62643
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
radicale/storage.py
View File

@ -125,7 +125,7 @@ def sanitize_path(path):
path = posixpath.normpath(path) path = posixpath.normpath(path)
new_path = "/" new_path = "/"
for part in path.split("/"): for part in path.split("/"):
if not part or part in (".", ".."): if not is_safe_path_component(part):
continue continue
new_path = posixpath.join(new_path, part) new_path = posixpath.join(new_path, part)
trailing_slash = "" if new_path.endswith("/") else trailing_slash trailing_slash = "" if new_path.endswith("/") else trailing_slash