h3n3/yet-another-cad-viewer
1
0
Fork 0
mirror of https://github.com/yeicor-3d/yet-another-cad-viewer.git synced 2025-12-19 14:14:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix fro symlink failures

Browse Source 
Issue outlined in https://github.com/yeicor-3d/yet-another-cad-viewer/issues/258
This commit is contained in:
Mac Ryan
2025-09-26 14:44:24 +02:00
committed by GitHub
parent 37ddf9ab63
commit fc737583fd
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
yacv_server/myhttp.py
View File

@@ -42,8 +42,8 @@ class HTTPHandler(SimpleHTTPRequestHandler):
path = super().translate_path(path) path = super().translate_path(path)
path = os.path.realpath(path) # Avoid symlink hacks path = os.path.realpath(path) # Avoid symlink hacks
if self.directory: # Ensure proper subdirectory if self.directory: # Ensure proper subdirectory
base = os.path.abspath(self.directory) base = os.path.realpath(self.directory)
if not os.path.abspath(path).startswith(base): if not path.startswith(base):
self.send_error(HTTPStatus.FORBIDDEN, "Path is not in the frontend directory") self.send_error(HTTPStatus.FORBIDDEN, "Path is not in the frontend directory")
return '' return ''
return path return path