oss/Radicale
oss/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-08-13 18:50:53 +00:00
Code Wiki Activity

assert sanitized and stripped paths

Browse source
This commit is contained in:
Unrud 2018-08-28 16:19:50 +02:00
parent c08754cf92
commit 5429f5c1a9
19 changed files with 108 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

5
radicale/tests/custom/rights.py
View file

@ -19,11 +19,12 @@ Custom rights management.
"""
from radicale import rights
from radicale import pathutils, rights
class Rights(rights.BaseRights):
def authorized(self, user, path, permissions):
if path.strip("/") not in ("tmp", "other"):
sane_path = pathutils.strip_path(path)
if sane_path not in ("tmp", "other"):
return ""
return rights.intersect_permissions(permissions)