We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 671b318 commit a286d46Copy full SHA for a286d46
1 file changed
rpi/run.py
@@ -227,8 +227,11 @@ def do_GET(self):
227
status = "OK"
228
case 'show':
229
url = qs.get("url", [None])[0]
230
- handle_wwwLoad(url)
231
- status = "OK"
+ if "@" in url:
+ status = "Posible URL-Spoofing detected! Please remove all @ characters from your file names."
232
+ else:
233
+ handle_wwwLoad(url)
234
+ status = "OK"
235
236
self.send_response(200)
237
self.send_header("Content-type", "text/html")
0 commit comments