kamp/anything-llm
1
0
Fork 0
mirror of https://github.com/Mintplex-Labs/anything-llm.git synced 2024-07-04 16:20:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

prevent deletion of documents not in hotdir via director traversal (#258)

Browse Source 
resolves #257
This commit is contained in:
Timothy Carambat 2023-09-29 20:04:47 +02:00 committed by GitHub
parent d5b1f84a4c
commit 18798c5b64
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
collector/api.py
View File

@ -1,3 +1,4 @@
import os
from flask import Flask, json, request
from scripts.watch.process_single import process_single
from scripts.watch.filetypes import ACCEPTED_MIMES
@ -7,7 +8,7 @@ WATCH_DIRECTORY = "hotdir"
@api.route('/process', methods=['POST'])
def process_file():
content = request.json
target_filename = content.get('filename')
target_filename = os.path.normpath(content.get('filename')).lstrip(os.pardir + os.sep)
print(f"Processing {target_filename}")
success, reason = process_single(WATCH_DIRECTORY, target_filename)
return json.dumps({'filename': target_filename, 'success': success, 'reason': reason})