Mirrored_Repos/crafty-4
1
0
Fork 0
mirror of https://gitlab.com/crafty-controller/crafty-4.git synced 2024-08-30 18:23:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix security issue in logical expression

Browse Source
This commit is contained in:
amcmanu3 2023-09-04 12:53:06 -04:00
parent adaaff3d23
commit 78b689b7ec
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/classes/web/routes/api/servers/server/files.py
View File

@ -401,7 +401,7 @@ class ApiServersServerFilesCreateHandler(BaseApiHandler):
if not Helpers.validate_traversal(
self.controller.servers.get_server_data_by_id(server_id)["path"],
path,
) and not Helpers.validate_traversal(
) or not Helpers.validate_traversal(
self.controller.servers.get_server_data_by_id(server_id)["path"],
new_item_path,
):