mirror of https://gitlab.com/bashrc2/epicyon
Another bad path
parent
c5f49d03d4
commit
282c5ce6ce
2
utils.py
2
utils.py
|
|
@ -3968,7 +3968,7 @@ def check_bad_path(path: str):
|
||||||
path_lower = path.lower()
|
path_lower = path.lower()
|
||||||
|
|
||||||
bad_strings = ('..', '/.', '%2e%2e', '%252e%252e',
|
bad_strings = ('..', '/.', '%2e%2e', '%252e%252e',
|
||||||
'/sftp.', '/sftp-')
|
'/sftp.', '/sftp-', '/statistics')
|
||||||
|
|
||||||
# allow /.well-known/...
|
# allow /.well-known/...
|
||||||
if '/.' in path_lower:
|
if '/.' in path_lower:
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue