indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Tidying

main
Bob Mottram 2024-08-03 15:49:38 +01:00
parent f7546896f6
commit 8ca03c3e20
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
utils.py
View File

@ -5508,9 +5508,8 @@ def check_bad_path(path: str):
"""for http GET or POST check that the path looks valid """for http GET or POST check that the path looks valid
""" """
path_lower = path.lower() path_lower = path.lower()
if '..' in path_lower or \ bad_strings = ('..', '/.', '%2e%2e', '%252e%252e')
'%2e%2e' in path_lower or \ if string_contains(path_lower, bad_strings):
'%252e%252e' in path_lower:
print('WARN: bad path ' + path) print('WARN: bad path ' + path)
return True return True
return False return False