deadcxap/0x0
1
0
Fork 0
mirror of https://git.0x0.st/mia/0x0.git synced 2026-01-09 20:11:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

File: Fix 404 case with secret URLs

Browse Source
This commit is contained in:
Mia Herkt
2022-12-13 23:17:56 +01:00
parent aaf0e4492a
commit d5763a9854
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
fhost.py
View File

@@ -439,10 +439,11 @@ def get(path, secret=None):
if sufs: if sufs:
f = File.query.get(id) f = File.query.get(id)
if f.secret != secret:
abort(404)
if f and f.ext == sufs: if f and f.ext == sufs:
if f.secret != secret:
abort(404)
if f.removed: if f.removed:
abort(451) abort(451)