tdpeuter/open-webui
tdpeuter/open-webui
1
Fork 0
forked from open-webui/open-webui
Code Issues Pull requests 1 Releases 2 Packages Activity Actions

fix

Browse source
This commit is contained in:
Timothy J. Baek 2024-04-01 15:23:12 -07:00
parent 83c7633acb
commit 5558514ff1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
backend/apps/rag/main.py
View file

@ -453,7 +453,7 @@ def store_doc(
if not unsanitized_filename.isascii(): if not unsanitized_filename.isascii():
is_valid_filename = False is_valid_filename = False
unvalidated_file_path = f"{UPLOAD_DIR}/{unsanitized_filename}" unvalidated_file_path = f"{UPLOAD_DIR}/{unsanitized_filename}"
dereferenced_file_path = str(Path(unvalidated_file_path).resolve(strict=False)) dereferenced_file_path = str(Path(unvalidated_file_path).resolve(strict=False))
if not dereferenced_file_path.startswith(UPLOAD_DIR): if not dereferenced_file_path.startswith(UPLOAD_DIR):
is_valid_filename = False is_valid_filename = False