symlink protection

This commit is contained in:
Usman Nasir
2020-02-06 22:14:27 +05:00
parent e869ff9bd1
commit 5436f9b00f

View File

@@ -335,7 +335,7 @@ class FileManager:
command = 'ls -la %s' % (self.data['fileName'])
output = ProcessUtilities.outputExecutioner(command)
if output.find(website.externalApp) == -1:
if output.find(website.externalApp) == -1 and output.find('No such file') == -1:
return self.ajaxPre(0, 'File exists and is symlink.')
if self.data['fileName'].find(self.data['home']) == -1 or self.data['fileName'].find('..') > -1: