filebrowser-safe icon indicating copy to clipboard operation
filebrowser-safe copied to clipboard

modify FOLDER_REGEX to include dotted directory paths

Open shiplet opened this issue 7 years ago • 2 comments

Ran into an issue where renaming Media Library files failed on file paths with dotted directory names: e.g. /var/www/sites/sitename.com/....

Propose including \. in the default FOLDER_REGEX to account for this fairly common naming schema out of the box.

shiplet avatar Apr 11 '18 23:04 shiplet

I haven't confirmed it, but I think this would allow admin users to traverse parent directories which could turn into a security issue.

stephenmcd avatar Apr 12 '18 02:04 stephenmcd

Good point. So far being able to overwrite the FILEBROWSER_FOLDER_REGEX in settings.py is sufficient for us, maybe it'd be worth adding a note to the Media Library docs?

shiplet avatar Apr 12 '18 17:04 shiplet