Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

(Maybe) fix potential code injection attack

Browse Source
This commit is contained in:
LukasDoesDev 2021-01-15 14:33:17 +02:00
parent eba7bff050
commit 75fb8fc920
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
app/classes/shared/helpers.py
View File

@ -9,6 +9,7 @@ import base64
import socket
import random
import logging
import html
from datetime import datetime
from socket import gethostname
@ -455,17 +456,19 @@ class Helpers:
return data
@staticmethod
def generate_tree(folder, html=""):
def generate_tree(folder, output=""):
for filename in os.listdir(folder):
print(filename)
filename = html.escape(filename)
print(filename)
rel = os.path.join(folder, filename)
if os.path.isdir(rel):
html += '<li>\n<span class="tree-caret">{}</span>\n<ul class="tree-nested">'.format(filename)
html += helper.generate_tree(rel)
html += '</ul>\n</li>'
output += '<li>\n<span class="tree-caret">{}</span>\n<ul class="tree-nested">'.format(filename)
output += helper.generate_tree(rel)
output += '</ul>\n</li>'
else:
html += '<li>{}</li>'.format(filename)
return html
output += '<li>{}</li>'.format(filename)
return output
helper = Helpers()