CreatBot/CreatBotMoonraker
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

file_manager: disallow drilling down protected folders

Browse Source 
Signed-off-by:  Kurt Haenen <kurt.haenen@gmail.com>
This commit is contained in:
Misterke 2022-11-05 14:53:52 +01:00 committed by Eric Callahan
parent 6f43940270
commit 130c2a48f0
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
moonraker/components/file_manager/file_manager.py
View File

@ -491,6 +491,7 @@ class FileManager:
if not os.path.isdir(path): if not os.path.isdir(path):
raise self.server.error( raise self.server.error(
f"Directory does not exist ({path})") f"Directory does not exist ({path})")
self.check_reserved_path(path, False)
flist: Dict[str, Any] = {'dirs': [], 'files': []} flist: Dict[str, Any] = {'dirs': [], 'files': []}
for fname in os.listdir(path): for fname in os.listdir(path):
full_path = os.path.join(path, fname) full_path = os.path.join(path, fname)