indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

More bad paths

main
bashrc 2026-01-15 15:55:55 +00:00
parent 876e2eeb91
commit 392c9b34cd
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
utils.py
View File

@ -3967,7 +3967,8 @@ def check_bad_path(path: str):
""" """
path_lower = path.lower() path_lower = path.lower()
bad_strings = ('..', '/.', '%2e%2e', '%252e%252e') bad_strings = ('..', '/.', '%2e%2e', '%252e%252e',
'/sftp.', '/sftp-')
# allow /.well-known/... # allow /.well-known/...
if '/.' in path_lower: if '/.' in path_lower: