Allow dot path

main
bashrc 2026-02-26 19:33:11 +00:00
parent 8e718f160a
commit 84df19e6bf
1 changed files with 2 additions and 1 deletions

View File

@ -4078,7 +4078,8 @@ def check_bad_path(path: str):
# allow /.well-known/...
if '/.' in path_lower:
if path_lower.startswith('/.well-known/') or \
path_lower.startswith('/users/.well-known/'):
path_lower.startswith('/users/.well-known/') or \
path_lower.startswith('/.ghost/activitypub/'):
bad_strings = ('..', '%2e%2e', '%252e%252e')
if path_lower.startswith('/wp-'):