RedHatQE / notify-service

Notify service with multiple supported target
MIT License
9 stars 5 forks source link

Fix uncontrolled data used in path #34

Closed waynesun09 closed 2 years ago

waynesun09 commented 2 years ago

The user specified path should be secured, using werkzeug.utils.secure_filename for the path.

Signed-off-by: Wayne Sun gsun@redhat.com