indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Extra bad path

main
bashrc 2026-01-22 15:59:07 +00:00
parent cd583deadb
commit 477ca609a8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
utils.py
View File

@ -3969,7 +3969,7 @@ def check_bad_path(path: str):
bad_strings = ('..', '/.', '%2e%2e', '%252e%252e', bad_strings = ('..', '/.', '%2e%2e', '%252e%252e',
'/sftp.', '/sftp-', '/statistics', '/sftp.', '/sftp-', '/statistics',
'/config/', 'settings.') '/config/', 'settings.', 'credentials')
# allow /.well-known/... # allow /.well-known/...
if '/.' in path_lower: if '/.' in path_lower: