libretranslate/security.py

import os


class SuspiciousFileOperationError(Exception):
    pass


def path_traversal_check(unsafe_path, known_safe_path):
    known_safe_path = os.path.abspath(known_safe_path)
    unsafe_path = os.path.abspath(unsafe_path)

    if (os.path.commonprefix([known_safe_path, unsafe_path]) != known_safe_path):
        raise SuspiciousFileOperationError(f"{unsafe_path} is not safe")

    # Passes the check
    return unsafe_path
Path traversal check 2021-10-26 15:41:14 -04:00			`import os`

cleanup: Whitespaces and imports - Remove unnecessary import - Reorder imports - Fix whitespace issues 2022-02-20 13:39:02 +05:30
Fixed some ruff warnings: requests without timeout and naming not complying with PEP 2023-07-09 12:38:03 +02:00			`class SuspiciousFileOperationError(Exception):`
Path traversal check 2021-10-26 15:41:14 -04:00			`pass`

cleanup: Whitespaces and imports - Remove unnecessary import - Reorder imports - Fix whitespace issues 2022-02-20 13:39:02 +05:30
Path traversal check 2021-10-26 15:41:14 -04:00			`def path_traversal_check(unsafe_path, known_safe_path):`
			`known_safe_path = os.path.abspath(known_safe_path)`
			`unsafe_path = os.path.abspath(unsafe_path)`

			`if (os.path.commonprefix([known_safe_path, unsafe_path]) != known_safe_path):`
Fixed some ruff warnings: requests without timeout and naming not complying with PEP 2023-07-09 12:38:03 +02:00			`raise SuspiciousFileOperationError(f"{unsafe_path} is not safe")`
Path traversal check 2021-10-26 15:41:14 -04:00
			`# Passes the check`
Fixed some ruff warnings: requests without timeout and naming not complying with PEP 2023-07-09 12:38:03 +02:00			`return unsafe_path`