1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-08-01 18:18:31 +00:00

Verify that base_prefix starts with '/'

This commit is contained in:
Unrud 2022-01-22 00:34:38 +01:00
parent 340582f84c
commit 17a5e5b6e0
3 changed files with 9 additions and 6 deletions

View file

@ -191,9 +191,10 @@ class Application(ApplicationPartDelete, ApplicationPartHead,
base_prefix_src = ("HTTP_X_SCRIPT_NAME" if "HTTP_X_SCRIPT_NAME" in
environ else "SCRIPT_NAME")
base_prefix = environ.get(base_prefix_src, "")
if base_prefix.endswith("/"):
logger.error("Base prefix (from %s) must not end with '/': %r",
base_prefix_src, base_prefix)
if base_prefix and (base_prefix[0] != "/" or base_prefix[-1] == "/"):
logger.error("Base prefix (from %s) must %s with '/': %r",
base_prefix_src, "not end" if base_prefix[-1] == "/"
else "start", base_prefix)
if base_prefix_src == "HTTP_X_SCRIPT_NAME":
return response(*httputils.BAD_REQUEST)
return response(*httputils.INTERNAL_SERVER_ERROR)