update "path traversal bug in api /knowledge_base/download_doc(#4008)… (

#4017) * Revert "path traversal bug in api /knowledge_base/download_doc(#4008) (#4009)" This reverts commit 2c146af. * Update utils.py
chatchat-space · May 14, 2024 · ede538b · ede538b
1 parent 2c146af
commit ede538b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/knowledge_base/utils.py b/server/knowledge_base/utils.py
@@ -43,7 +43,7 @@ def get_vs_path(knowledge_base_name: str, vector_name: str):
 
 def get_file_path(knowledge_base_name: str, doc_name: str):
  doc_path = Path(get_doc_path(knowledge_base_name))
- file_path = doc_path / doc_name
+ file_path = (doc_path / doc_name).resolve()
  if file_path.is_relative_to(doc_path):
  return str(file_path)