oss/Radicale
oss/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-06-26 16:45:52 +00:00
Code Wiki Activity

Don't strip {} in get method

Browse source 
If someone uploads a file that starts or ends with the chars {}, all REPORT requests on that collection will fail and it's impossible to delete the file.
This commit is contained in:
Unrud 2016-09-04 13:35:44 +02:00
parent 6df54bf88a
commit 03fbb1e68e
1 changed files with 0 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
radicale/storage.py
View file

@ -618,7 +618,6 @@ class Collection(BaseCollection):
def get(self, href):
if not href:
return None
href = href.strip("{}")
if not is_safe_filesystem_path_component(href):
self.logger.debug(
"Can't translate name safely to filesystem: %s", href)