fix bug

Physton · Sep 26, 2023 · 6e06fb0 · 6e06fb0
1 parent 6d76895
commit 6e06fb0
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/scripts/on_app_started.py b/scripts/on_app_started.py
@@ -340,7 +340,7 @@ async def _get_csv(key: str):
     @app.get("/physton_prompt/styles")
     async def _styles(file: str):
         file_path = get_style_full_path(file)
-        if not os.path.exists(file_path):
+        if not file_path or not os.path.exists(file_path):
             return Response(status_code=404)
         return FileResponse(file_path, filename=os.path.basename(file_path))
 

diff --git a/scripts/physton_prompt/styles.py b/scripts/physton_prompt/styles.py
@@ -9,7 +9,14 @@
 
 def get_style_full_path(file):
     global styles_path
-    return os.path.join(styles_path, file)
+    path = os.path.join(styles_path, file)
+    path = os.path.abspath(path)
+    path = os.path.normpath(path)
+    if not os.path.exists(path):
+        return None
+    if styles_path not in path:
+        return None
+    return path
 
 
 def get_extension_css_list():