mirror of
https://github.com/akuker/RASCSI.git
synced 2024-11-29 01:49:19 +00:00
Don't show user controlled string in UI (#1087)
This commit is contained in:
parent
fc82ceae40
commit
8b0a85a143
@ -998,7 +998,7 @@ def upload_file():
|
|||||||
elif destination == "piscsi_config":
|
elif destination == "piscsi_config":
|
||||||
destination_dir = CFG_DIR
|
destination_dir = CFG_DIR
|
||||||
else:
|
else:
|
||||||
return make_response(f"Invalid destination '{destination}'", 403)
|
return make_response("Invalid destination", 403)
|
||||||
|
|
||||||
return upload_with_dropzonejs(destination_dir)
|
return upload_with_dropzonejs(destination_dir)
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user