mirror of
https://github.com/github/codeql.git
synced 2026-04-13 11:04:07 +02:00
22 lines
738 B
Python
22 lines
738 B
Python
from flask import Flask, request, send_from_directory # $ Source
|
|
app = Flask(__name__)
|
|
|
|
|
|
STATIC_DIR = "/server/static/"
|
|
|
|
|
|
# see https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_from_directory
|
|
@app.route("/provide-filename")
|
|
def download_file():
|
|
filename = request.args.get('filename', '')
|
|
# ok since `send_from_directory` ensure this stays within `STATIC_DIR`
|
|
return send_from_directory(STATIC_DIR, filename) # $ result=OK
|
|
|
|
|
|
# see https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_from_directory
|
|
@app.route("/also-provide-dirname")
|
|
def download_file():
|
|
dirname = request.args.get('dirname', '')
|
|
filename = request.args.get('filename', '')
|
|
return send_from_directory(dirname, filename) # $ Alert
|