diff --git a/radicale/ical.py b/radicale/ical.py index eaa9460d..16f7d87a 100644 --- a/radicale/ical.py +++ b/radicale/ical.py @@ -196,7 +196,8 @@ class Calendar(object): """ # First do normpath and then strip, to prevent access to FOLDER/../ - attributes = posixpath.normpath(path).strip("/").split("/") + sane_path = posixpath.normpath(path.replace(os.sep, "/")).strip("/") + attributes = sane_path.split("/") if not attributes: return None if not (os.path.isfile(os.path.join(FOLDER, *attributes)) or