mirror of https://gitlab.com/bashrc2/epicyon
Allow dot path
parent
8e718f160a
commit
84df19e6bf
3
utils.py
3
utils.py
|
|
@ -4078,7 +4078,8 @@ def check_bad_path(path: str):
|
||||||
# allow /.well-known/...
|
# allow /.well-known/...
|
||||||
if '/.' in path_lower:
|
if '/.' in path_lower:
|
||||||
if path_lower.startswith('/.well-known/') or \
|
if path_lower.startswith('/.well-known/') or \
|
||||||
path_lower.startswith('/users/.well-known/'):
|
path_lower.startswith('/users/.well-known/') or \
|
||||||
|
path_lower.startswith('/.ghost/activitypub/'):
|
||||||
bad_strings = ('..', '%2e%2e', '%252e%252e')
|
bad_strings = ('..', '%2e%2e', '%252e%252e')
|
||||||
|
|
||||||
if path_lower.startswith('/wp-'):
|
if path_lower.startswith('/wp-'):
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue