Skip to content

F
flask-admin
Commit a31f5c34 authored by Paul Brown's avatar Paul Brown
Browse files
Options

Merge pull request #1089 from porduna/patch-1 

Do not disclose the file system full path
parents cf2c063f 3e016431
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
flask_admin/contrib/fileadmin.py
View file @ a31f5c34
...@@ -596,7 +596,8 @@ class FileAdmin(BaseView, ActionsMixin): ...@@ -596,7 +596,8 @@ class FileAdmin(BaseView, ActionsMixin):
secure_filename(form.upload.data.filename)) secure_filename(form.upload.data.filename))
if op.exists(filename): if op.exists(filename):
flash(gettext('File "%(name)s" already exists.', name=filename), secure_name = op.join(path, secure_filename(form.upload.data.filename))
flash(gettext('File "%(name)s" already exists.', name=secure_name),
'error') 'error')
else: else:
self.save_file(filename, form.upload.data) self.save_file(filename, form.upload.data)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment