Use path.parts instead of match (#2508)

This commit is contained in:
Adam Hopkins 2022-07-31 12:54:42 +03:00 committed by GitHub
parent e100a14fd4
commit 3def3d3569
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -818,7 +818,7 @@ class RouteMixin(metaclass=SanicMeta):
file_path = file_path_raw.resolve()
if (
file_path < root_path and not file_path_raw.is_symlink()
) or file_path_raw.match("../**/*"):
) or ".." in file_path_raw.parts:
error_logger.exception(
f"File not found: path={file_or_directory}, "
f"relative_url={__file_uri__}"