Merge pull request #338 from zanllp/fix-path-check

fix path check
2023-07-23 20:41:38 +08:00 · 2023-07-23 20:41:38 +08:00 · f79d931d22
parent a28fc74282 eb26cb92a8
commit f79d931d22
1 changed files with 2 additions and 0 deletions
--- a/scripts/iib/api.py
+++ b/scripts/iib/api.py
@ -165,6 +165,8 @@ def infinite_image_browsing_api(app: FastAPI, **kwargs):
    def is_path_trusted(path: str):
        if not enable_access_control:
            return True
+        if not os.path.isabs(path):
+            path = os.path.normpath(os.path.join(os.getcwd(), path))
        try:
            parent_paths = mem["all_scanned_paths"]
            path = os.path.normpath(path)