From 282c5ce6cee4b87d194283f546f5463d33f97e32 Mon Sep 17 00:00:00 2001
From: bashrc <bob@libreserver.org>
Date: Sat, 17 Jan 2026 11:55:59 +0000
Subject: [PATCH] Another bad path

---
 utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/utils.py b/utils.py
index 5ac0ca0f1..0b795317b 100644
--- a/utils.py
+++ b/utils.py
@@ -3968,7 +3968,7 @@ def check_bad_path(path: str):
     path_lower = path.lower()
 
     bad_strings = ('..', '/.', '%2e%2e', '%252e%252e',
-                   '/sftp.', '/sftp-')
+                   '/sftp.', '/sftp-', '/statistics')
 
     # allow /.well-known/...
     if '/.' in path_lower: