emfcamp / Website

The Electromagnetic Field web site
http://www.emfcamp.org
GNU Affero General Public License v3.0
41 stars 83 forks source link

Get rid of path probe vulns #1765

Open marksteward opened 1 month ago

marksteward commented 1 month ago

There are path probe vulns in e.g. https://github.com/emfcamp/Website/blob/1e7b91f63787e96a36fcca48a658c7f6c49fda72/apps/common/__init__.py#L319

We should check that they're in the expected directory, and move all this to a central helper function.