GithubBackup/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-09-05 15:38:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #4438 from H1dery/v2

Browse Source
This commit is contained in:
jxxghp
2025-06-12 20:05:00 +08:00
committed by GitHub
parent 23b981c5ac 7979ce0f0a
commit fd7a6f8ddd
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/endpoints/plugin.py
+1 -1
View File
@@ -348,7 +348,7 @@ def plugin_static_file(plugin_id: str, filepath: str):
获取插件静态文件 获取插件静态文件
""" """
# 基础安全检查 # 基础安全检查
if ".." in filepath or ".." in filepath: if ".." in filepath or ".." in plugin_id:
logger.warning(f"Static File API: Path traversal attempt detected: {plugin_id}/{filepath}") logger.warning(f"Static File API: Path traversal attempt detected: {plugin_id}/{filepath}")
raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Forbidden") raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Forbidden")