github/OpenHands
1
1
Fork 0
mirror of https://github.com/All-Hands-AI/OpenHands.git synced 2026-01-09 14:57:59 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix path traversal vulnerability (#1199)

Browse Source
This commit is contained in:
Alex Bäuerle
2024-04-18 03:49:37 -07:00
committed by GitHub
parent 426f387123
commit 51149780ac
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
opendevin/server/listen.py
View File

@@ -114,6 +114,8 @@ def select_file(file: str):
try:
workspace_base = config.get('WORKSPACE_BASE')
file_path = Path(workspace_base, file)
# The following will check if the file is within the workspace base and throw an exception if not
file_path.resolve().relative_to(Path(workspace_base).resolve())
with open(file_path, 'r') as selected_file:
content = selected_file.read()
except Exception as e: