Merge pull request #1188 from GNS3/fix-post-file-normalization

Fixes path normalization during file upload on nodes (Fixes: #2276)
This commit is contained in:
Jeremy Grossmann authored and GitHub committed 2017-10-05 02:07:02 -07:00
commit 67c78ba2e3
2 files changed
+19 -1

No files matched your search

@@ -367,6 +367,7 @@ class NodeHandler:
path = request.match_info["path"]
path = force_unix_path(path)
# Raise error if user try to escape
if path[0] == ".":
raise aiohttp.web.HTTPForbidden
@@ -401,7 +402,7 @@ class NodeHandler:
project = yield from Controller.instance().get_loaded_project(request.match_info["project_id"])
node = project.get_node(request.match_info["node_id"])
path = request.match_info["path"]
path = os.path.normpath(path)
path = force_unix_path(path)
# Raise error if user try to escape
if path[0] == ".":