Message396566
I understand why this problem arose. If you parse an HTTP URL, its path always starts with "/" if not empty. And you usually want to interpret it as a relative to some base directory. But lstrip('/') works well here. In any case you need to have some validation to disallow "..".
I think that adding yet one operation will confuse users. And what to do with C:\foo\bar, C:foo\bar, \\?\c\foo\bar, etc? |
|
Date |
User |
Action |
Args |
2021-06-27 08:20:20 | serhiy.storchaka | set | recipients:
+ serhiy.storchaka, eric.smith, zbysz, veky |
2021-06-27 08:20:20 | serhiy.storchaka | set | messageid: <1624782020.92.0.239458163867.issue44452@roundup.psfhosted.org> |
2021-06-27 08:20:20 | serhiy.storchaka | link | issue44452 messages |
2021-06-27 08:20:20 | serhiy.storchaka | create | |
|