diff --git a/python/web/src/templates/upload.html b/python/web/src/templates/upload.html index 9a8df9e8..11c269b5 100644 --- a/python/web/src/templates/upload.html +++ b/python/web/src/templates/upload.html @@ -15,11 +15,8 @@ diff --git a/python/web/src/web.py b/python/web/src/web.py index f7b09148..0e15fd59 100644 --- a/python/web/src/web.py +++ b/python/web/src/web.py @@ -990,7 +990,7 @@ def upload_file(): return make_response(auth["msg"], 403) destination = request.form.get("destination") - subdir = request.form.get("subdir") + subdir = request.form.get("subdir").replace("images/", "", 1) if destination == "disk_images": safe_path = is_safe_path(Path(subdir)) if not safe_path["status"]: