Show More
@@ -305,7 +305,8 b' class AuthenticatedFileHandler(IPythonHandler, web.StaticFileHandler):' | |||
|
305 | 305 | # check UF_HIDDEN on any location up to root |
|
306 | 306 | path = absolute_path |
|
307 | 307 | while path and path.startswith(absolute_root): |
|
308 |
|
|
|
308 | st = os.stat(path) | |
|
309 | if getattr(st, 'st_flags', 0) & UF_HIDDEN: | |
|
309 | 310 | raise web.HTTPError(403) |
|
310 | 311 | path, _ = os.path.split(path) |
|
311 | 312 |
General Comments 0
You need to be logged in to leave comments.
Login now