Use path.parts instead of match (#2508)
This commit is contained in:
parent
0985d130e2
commit
0901d3188a
|
@ -818,7 +818,7 @@ class RouteMixin(metaclass=SanicMeta):
|
||||||
file_path = file_path_raw.resolve()
|
file_path = file_path_raw.resolve()
|
||||||
if (
|
if (
|
||||||
file_path < root_path and not file_path_raw.is_symlink()
|
file_path < root_path and not file_path_raw.is_symlink()
|
||||||
) or file_path_raw.match("../**/*"):
|
) or ".." in file_path_raw.parts:
|
||||||
error_logger.exception(
|
error_logger.exception(
|
||||||
f"File not found: path={file_or_directory}, "
|
f"File not found: path={file_or_directory}, "
|
||||||
f"relative_url={__file_uri__}"
|
f"relative_url={__file_uri__}"
|
||||||
|
|
Loading…
Reference in New Issue
Block a user