ExternalVendorCode/lollms-webui
1
0
Fork 0
mirror of https://github.com/ParisNeo/lollms-webui.git synced 2025-02-21 01:31:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

added path sanitization for file upload

Browse Source
This commit is contained in:
Saifeddine ALOUI 2024-09-08 14:43:34 +02:00
parent bcfd0d6234
commit dcc078cbe2
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
endpoints/lollms_apps.py
View File

@ -272,6 +272,7 @@ async def download_app(input_data: AppNameInput):
@router.post("/upload_app")
async def upload_app(client_id: str, file: UploadFile = File(...)):
check_access(lollmsElfServer, client_id)
sanitize_path(file.filename)
# Create a temporary directory to extract the zip file
temp_dir = lollmsElfServer.lollms_paths.personal_path / "temp"