search

tkuester / taky

A simple python TAK server
MIT License
184 stars 43 forks source link

Path fix #96

Closed hunterSG7 closed 3 months ago

hunterSG7 commented 3 months ago

The file names are generated from client defined input. To eliminate directory traversal a check is made to ensure that files stay in the right folder.

tkuester commented 3 months ago

Coming through with the huge bug fixes again! Great work!

Gah, I can't believe I didn't get this into the 0.10 fix. Is it bad if I'm too embarrassed to release two bug fixes in one day? :(