From fe9a9899e3f875f9cecb0d2727ef2015afb8f6d5 Mon Sep 17 00:00:00 2001 From: Eric Callahan Date: Sat, 7 Jan 2023 16:47:20 -0500 Subject: [PATCH] file_manager: reserved path fix Raise an exception if an attempt is made to access .git folders. Signed-off-by: Eric Callahan --- moonraker/components/file_manager/file_manager.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/moonraker/components/file_manager/file_manager.py b/moonraker/components/file_manager/file_manager.py index a47666a..bf8aa56 100644 --- a/moonraker/components/file_manager/file_manager.py +++ b/moonraker/components/file_manager/file_manager.py @@ -275,6 +275,10 @@ class FileManager: req_path = pathlib.Path(req_path) req_path = req_path.expanduser().resolve() if ".git" in req_path.parts: + if raise_error: + raise self.server.error( + "Access to .git folders is forbidden", 403 + ) return True for name, (res_path, can_read) in self.reserved_paths.items(): if (