mirror of
https://github.com/9001/copyparty.git
synced 2026-10-05 22:04:38 +01:00
dk: block subdir zip (GHSA-mc69-pxc8-4xf4)
This commit is contained in:
@@ -3151,7 +3151,8 @@ class HttpCli(object):
|
|||||||
|
|
||||||
v = self.uparam[k]
|
v = self.uparam[k]
|
||||||
|
|
||||||
if self._use_dirkey(self.vn, ""):
|
is_dk = self._use_dirkey(self.vn, "")
|
||||||
|
if is_dk:
|
||||||
vn = self.vn
|
vn = self.vn
|
||||||
rem = self.rem
|
rem = self.rem
|
||||||
else:
|
else:
|
||||||
@@ -3163,6 +3164,9 @@ class HttpCli(object):
|
|||||||
|
|
||||||
items = zs.replace("\r", "").split("\n")
|
items = zs.replace("\r", "").split("\n")
|
||||||
items = [unquotep(x) for x in items if items]
|
items = [unquotep(x) for x in items if items]
|
||||||
|
if is_dk:
|
||||||
|
zss = set(vn_ls_regfile(self.args, vn, rem))
|
||||||
|
items = [x for x in items if x in zss]
|
||||||
|
|
||||||
self.parser.drop()
|
self.parser.drop()
|
||||||
return self.tx_zip(k, v, "", vn, rem, items)
|
return self.tx_zip(k, v, "", vn, rem, items)
|
||||||
|
|||||||
Reference in New Issue
Block a user