Fix Issue #11

Uncontrolled data used in path expression
TheManWhoLikesToCode · Jan 16, 2024 · 63d7879 · 63d7879
1 parent ffb92b6
commit 63d7879
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -6,3 +6,5 @@ frontend/.env
 *.pyc
 *.DS_Store
 backend/support/.DS_Store
+credentials.json
+backend/credentials.json
diff --git a/backend/app.py b/backend/app.py
@@ -32,8 +32,8 @@
 
 
 def is_file_valid(file_path):
-    return os.path.isfile(file_path) and not os.path.islink(file_path)
-
+    normalized_path = os.path.normpath(file_path)
+    return os.path.isfile(normalized_path) and not os.path.islink(normalized_path)
 
 def remove_file_safely(file_path):
     try: