oss/Radicale
oss/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-06-26 16:45:52 +00:00
Code Wiki Activity

Check for conflicting file names

Browse source 
On Windows file systems the user "TESTUS~1" can access the data of the user "testuser".
This commit is contained in:
Unrud 2017-03-07 17:44:07 +01:00
parent 9900251b8b
commit 2d170bd41f
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
radicale/storage.py
View file

@ -172,7 +172,13 @@ def path_to_filesystem(root, *paths):
for part in path.split("/"):
if not is_safe_filesystem_path_component(part):
raise UnsafePathError(part)
safe_path_parent = safe_path
safe_path = os.path.join(safe_path, part)
# Check for conflicting files (e.g. case-insensitive file systems
# or short names on Windows file systems)
if os.path.lexists(safe_path):
if not part in os.listdir(safe_path_parent):
raise CollidingPathError(part)
return safe_path
@ -182,6 +188,12 @@ class UnsafePathError(ValueError):
super().__init__(message)
class CollidingPathError(ValueError):
def __init__(self, path):
message = "File name collision: %s" % path
super().__init__(message)
class ComponentExistsError(ValueError):
def __init__(self, path):
message = "Component already exists: %s" % path