mirror of
https://github.com/usmannasir/cyberpanel.git
synced 2026-07-20 09:20:49 +02:00
security fix: submitDomainCreation
This commit is contained in:
@@ -261,6 +261,9 @@ class WebsiteManager:
|
||||
else:
|
||||
return ACLManager.loadErrorJson('createWebSiteStatus', 0)
|
||||
|
||||
if data['path'].find('..') > -1:
|
||||
return ACLManager.loadErrorJson('createWebSiteStatus', 0)
|
||||
|
||||
if currentACL['admin'] != 1:
|
||||
data['openBasedir'] = 1
|
||||
|
||||
|
||||
Reference in New Issue
Block a user