Changeset 1773
- Timestamp:
- 10/27/07 12:15:58
- Files:
-
- trunk/cherrypy/lib/sessions.py (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/cherrypy/lib/sessions.py
r1770 r1773 283 283 284 284 def _get_file_path(self): 285 return os.path.join(self.storage_path, self.SESSION_PREFIX + self.id) 285 f = os.path.join(self.storage_path, self.SESSION_PREFIX + self.id) 286 if not os.path.normpath(f).startswith(self.storage_path): 287 raise cherrypy.HTTPError(400, "Invalid session id in cookie.") 288 return f 286 289 287 290 def _load(self, path=None):
