disallow uploading logues

2026-03-24 17:13:01 +10:00 · 2021-05-12 23:22:43 +02:00
parent c30dc0b546
commit 26e18ae800
4 changed files with 9 additions and 7 deletions
--- a/copyparty/httpcli.py
+++ b/copyparty/httpcli.py
@@ -741,7 +741,9 @@ class HttpCli(object):

                if p_file and not nullwrite:
                    fdir = os.path.join(vfs.realpath, rem)
-                    fname = sanitize_fn(p_file)
+                    fname = sanitize_fn(
+                        p_file, bad=[".prologue.html", ".epilogue.html"]
+                    )

                    if not os.path.isdir(fsenc(fdir)):
                        raise Pebkac(404, "that folder does not exist")