Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't sanitize subdirectories #237

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Jwiggiff
Copy link

@Jwiggiff Jwiggiff commented Jan 8, 2022

Currently if you try to download files into a subdirectory the directory separators are replaced with underscores. This is a result of #225 which fixed a security vulnerability involving the ability to use /../ to download into parent directories. I've attempted to restore the ability to download in to subdirectories without reintroducing the above security vulnerability. I have done some basic testing.

Fix #236

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Download file to subdirectory
1 participant