RYDE-WORK/Langchain-Chatchat
1
0
Fork 0
mirror of https://github.com/RYDE-WORK/Langchain-Chatchat.git synced 2026-02-07 07:23:29 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

update "path traversal bug in api /knowledge_base/download_doc(#4008)… (#4017)

Browse Source 
* Revert "path traversal bug in api /knowledge_base/download_doc(#4008) (#4009)"

This reverts commit 2c146aff74bac427f0a4921971d8472097410bdf.

* Update utils.py
This commit is contained in:
liunux4odoo 2024-05-14 18:48:55 +08:00 committed by GitHub
parent 2c146aff74
commit ede538bfe2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/knowledge_base/utils.py
View File

@ -43,7 +43,7 @@ def get_vs_path(knowledge_base_name: str, vector_name: str):
def get_file_path(knowledge_base_name: str, doc_name: str): def get_file_path(knowledge_base_name: str, doc_name: str):
doc_path = Path(get_doc_path(knowledge_base_name)) doc_path = Path(get_doc_path(knowledge_base_name))
file_path = doc_path / doc_name file_path = (doc_path / doc_name).resolve()
if file_path.is_relative_to(doc_path): if file_path.is_relative_to(doc_path):
return str(file_path) return str(file_path)