builderadmin
/
NoteDiscovery
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Merge pull request #20 from gamosoft/delete-folder-check 

fixed security issue with notes deletion (#19)
This commit is contained in:
Gamosoft 2025-11-17 09:45:46 +01:00 committed by GitHub
parent fcd660ce19 7a365edc91
commit bb76ca9021
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
backend/utils.py
View File

@ -132,6 +132,11 @@ def delete_folder(notes_dir: str, folder_path: str) -> bool:
try: try:
full_path = Path(notes_dir) / folder_path full_path = Path(notes_dir) / folder_path
# Security check: ensure the path is within notes_dir
if not validate_path_security(notes_dir, full_path):
print(f"Security: Path is outside notes directory: {full_path}")
return False
if not full_path.exists(): if not full_path.exists():
print(f"Folder does not exist: {full_path}") print(f"Folder does not exist: {full_path}")
return False return False