fix: correct directory transversal

WeblateOrg · Nov 27, 2024 · 1be6635 · 1be6635
1 parent db0c1cb
commit 1be6635
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/weblate_web/hetzner.py b/weblate_web/hetzner.py
@@ -45,7 +45,7 @@ def get_directory_summary(
         if attr.st_mode is None or attr.st_size is None or attr.st_mtime is None:
             raise ValueError(f"Incomplete attributes {attr}")
         if stat.S_ISDIR(attr.st_mode):
-            ftp.chdir(attr.filename)
+            ftp.chdir(dirname)
             dir_size, dir_mtime = get_directory_summary(
                 ftp, attr.filename, dirstat=attr
             )