Potential catch for if somehow a user sends a delete model with a .. in it.

2022-06-14 19:30:01 -04:00 · 2022-06-14 19:30:01 -04:00 · f444ad851f
parent 899f191b51
commit f444ad851f
1 changed files with 1 additions and 1 deletions
--- a/aiserver.py
+++ b/aiserver.py
@ -3097,7 +3097,7 @@ def get_message(msg):
            else:
                get_model_info(vars.model)
    elif(msg['cmd'] == 'delete_model'):
-        if "{}/models".format(os.getcwd()) in msg['data'] or "{}\\models".format(os.getcwd()) in msg['data']:
+        if "{}/models".format(os.getcwd()) in os.path.abspath(msg['data']) or "{}\\models".format(os.getcwd()) in os.path.abspath(msg['data']):
            if check_if_dir_is_model(msg['data']):
                print("It's a model, now we really will kill it")
                import shutil