YunoHost/package_linter
1
0
Fork 0
mirror of https://github.com/YunoHost/package_linter.git synced 2024-09-03 20:06:12 +02:00
Code Issues Projects Releases Packages Wiki Activity

path traversal issue: Ignore trailing simple quotes

Browse source
This commit is contained in:
Alexandre Aubin 2021-08-16 14:02:37 +02:00 committed by GitHub
parent 8fb895d258
commit 1ef85021d4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
package_linter.py
View file

@ -887,7 +887,7 @@ class Configurations(TestSuite):
# means that the app is not using the standard nginx
# helper, and therefore it is likely to be replaced by
# something ending with / ...
if not location.endswith("/") \
if not location.strip("'").endswith("/") \
and (alias_path.endswith("/") or "__FINALPATH__" not in alias_path):
yield location