yujunjun/OCRmyPDF
1
0
Fork 0
mirror of https://github.com/ocrmypdf/OCRmyPDF.git synced 2025-11-03 19:30:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Tighten unpaper-args validation to exclude . and ..

Browse Source 
Just in case
This commit is contained in:
James R. Barlow 2020-09-24 16:43:31 -07:00
parent bfe4a5b329
commit 28eec73eed
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ocrmypdf/_exec/unpaper.py
View File

@ -107,7 +107,7 @@ def run(input_file, output_file, dpi, mode_args):
def validate_custom_args(args: str):
unpaper_args = shlex.split(args)
if any('/' in arg for arg in unpaper_args):
if any(('/' in arg or arg == '.' or arg == '..') for arg in unpaper_args):
raise ValueError('No filenames allowed in --unpaper-args')
return unpaper_args