Files
2018-11-19 15:15:54 +00:00

19 lines
361 B
Python

from flask import Flask, request, redirect
app = Flask(__name__)
@app.route('/')
def hello():
target = files = request.args.get('target', '')
return redirect(target, code=302)
#Check for safe prefixes
@app.route('/ok')
def ok():
untrusted = request.args.get('ok', '')
safe = "safe"
safe += untrusted
return redirect(safe, code=302)