q792602257/XiguaLiveDanmakuHelper
Archived
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

修正漏洞,避免配置文件泄露

Browse Source
This commit is contained in:
Jerry Yan 2020-03-30 18:54:39 +08:00
parent db961deace
commit 5a72550598
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
WebMain.py
View File

@ -168,7 +168,8 @@ def fileDownload(path):
f.seek(offset) f.seek(offset)
for row in f: for row in f:
yield row yield row
if not (".mp4" in path or ".flv" in path):
return Response(status=404)
if os.path.exists(path): if os.path.exists(path):
if "RANGE" in request.headers: if "RANGE" in request.headers:
offset = int(request.headers["RANGE"].replace("=", "-").split("-")[1].strip()) offset = int(request.headers["RANGE"].replace("=", "-").split("-")[1].strip())