do not allow getting out

2021-04-29 17:45:23 +02:00 · 2021-04-29 17:45:23 +02:00 · ec5a36c700
commit ec5a36c700
parent fe26bd1727
1 changed files with 3 additions and 0 deletions
--- a/server/executor.py
+++ b/server/executor.py
@ -39,8 +39,11 @@ class Executor:
            p = Path(os.path.join(self.baseDir, self.currentDirectory))
            parentpath = p.parent
            if (str(parentpath) + os.path.sep)== self.baseDir:
+                self.currentDirectory = ""
                return self.currentDirectory
            else:
+                if len(str(parentpath).split('/')) < len(self.baseDir.split('/')):
+                    return self.currentDirectory
                newpath = str(parentpath).replace(self.baseDir,'')
                if os.path.exists(os.path.join(self.baseDir,newpath)):
                    self.currentDirectory = newpath