mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-30 17:52:26 +01:00
fix(upload,ui): confine thumbnail paths and align stylesheet cache-bust token
This commit is contained in:
@@ -461,7 +461,10 @@ def setup_upload_routes(upload_handler):
|
|||||||
# Skip generation during HEAD probe to avoid loading/processing whole image.
|
# Skip generation during HEAD probe to avoid loading/processing whole image.
|
||||||
if thumb and mime.startswith("image/"):
|
if thumb and mime.startswith("image/"):
|
||||||
thumb_dir = os.path.join(_upload_root(), ".thumbs")
|
thumb_dir = os.path.join(_upload_root(), ".thumbs")
|
||||||
thumb_path = os.path.join(thumb_dir, file_id + ".jpg")
|
safe_file_id = os.path.basename(file_id)
|
||||||
|
thumb_path = os.path.join(thumb_dir, safe_file_id + ".jpg")
|
||||||
|
if not _path_inside_upload_dir(thumb_path) or not is_inside(thumb_dir, thumb_path):
|
||||||
|
raise HTTPException(403, "Access denied")
|
||||||
if request.method == "HEAD":
|
if request.method == "HEAD":
|
||||||
if (os.path.isfile(thumb_path)
|
if (os.path.isfile(thumb_path)
|
||||||
and os.path.getmtime(thumb_path) >= os.path.getmtime(path)):
|
and os.path.getmtime(thumb_path) >= os.path.getmtime(path)):
|
||||||
|
|||||||
+1
-1
@@ -257,7 +257,7 @@
|
|||||||
<link rel="stylesheet" href="/static/css/00-tokens.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/00-tokens.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/01-agent-chat.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/01-agent-chat.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/02-compare.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/02-compare.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/03-agent-chat.css?v=20261017titlefade1">
|
<link rel="stylesheet" href="/static/css/03-agent-chat.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/04-memory.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/04-memory.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/05-documents.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/05-documents.css?v=20260929csssplit">
|
||||||
<link rel="stylesheet" href="/static/css/06-admin-settings.css?v=20260929csssplit">
|
<link rel="stylesheet" href="/static/css/06-admin-settings.css?v=20260929csssplit">
|
||||||
|
|||||||
Reference in New Issue
Block a user