We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8574ca8 commit b4e5be3Copy full SHA for b4e5be3
1 file changed
src/session_store.py
@@ -17,13 +17,13 @@ class StoredSession:
17
18
19
def validate_session_id(session_id: str) -> None:
20
+ if not session_id:
21
+ raise ValueError("Invalid session ID: cannot be empty")
22
if "/" in session_id or "\\" in session_id:
23
raise ValueError(f"Invalid session ID: contains path separators ({session_id})")
- if session_id in (".", ".."):
- raise ValueError(f"Invalid session ID: cannot be '.' or '..' ({session_id})")
24
- if ".." in session_id:
+ if session_id == "." or ".." in session_id:
25
raise ValueError(
26
- f"Invalid session ID: contains directory traversal ('..') ({session_id})"
+ f"Invalid session ID: contains directory traversal markers ({session_id})"
27
)
28
29
0 commit comments