mirror of
https://github.com/akuker/RASCSI.git
synced 2024-12-30 05:29:47 +00:00
Don't show user controlled string in UI (#1087)
This commit is contained in:
parent
fc82ceae40
commit
8b0a85a143
@ -998,7 +998,7 @@ def upload_file():
|
||||
elif destination == "piscsi_config":
|
||||
destination_dir = CFG_DIR
|
||||
else:
|
||||
return make_response(f"Invalid destination '{destination}'", 403)
|
||||
return make_response("Invalid destination", 403)
|
||||
|
||||
return upload_with_dropzonejs(destination_dir)
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user