Flask: sanitize OGC schema pathing (#1593)

2024-03-12 09:16:34 -04:00
parent d8a1b741ed
commit ff4c4f6d46
1 changed files with 5 additions and 2 deletions
@@ -101,8 +101,11 @@ if (OGC_SCHEMAS_LOCATION is not None and
        dirname_ = os.path.dirname(full_filepath)
        basename_ = os.path.basename(full_filepath)

-        # TODO: better sanitization?
-        path_ = dirname_.replace('..', '').replace('//', '')
+        path_ = dirname_.replace('..', '').replace('//', '').replace('./', '')
+
+        if '..' in path_:
+            return 'Invalid path', 400
+
        return send_from_directory(path_, basename_,
                                   mimetype=get_mimetype(basename_))