maziggy 7fa00ed475 Fix path traversal vulnerability in file upload endpoints ...

Archive upload endpoints used the client-supplied filename directly
  in file paths, allowing an authenticated attacker to write files
  outside the intended directory (e.g. ../../evil.3mf bypasses the
  .3mf extension check). Added _safe_filename() helper that normalizes
  backslashes and extracts the basename before constructing paths.

2026-04-04 12:41:01 +02:00

..

routes

Fix path traversal vulnerability in file upload endpoints

2026-04-04 12:41:01 +02:00

__init__.py

…