From 13e7a6e569c2eb90db6bb415cd5435bd3a4cd360 Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Wed, 22 Apr 2026 20:10:44 +0200 Subject: [PATCH] path value check: extend pattern --- radicale/app/base.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/radicale/app/base.py b/radicale/app/base.py index 453515cf..81bc6258 100644 --- a/radicale/app/base.py +++ b/radicale/app/base.py @@ -33,7 +33,7 @@ import defusedxml.ElementTree as DefusedET # isort:skip sys.modules["xml.etree"].ElementTree = ET # type:ignore[attr-defined] USER_PATTERN_STRICT: str = "a-zA-Z0-9@\\.\\-_" -PATH_PATTERN_STRICT: str = USER_PATTERN_STRICT + "\\/" # / as separator +PATH_PATTERN_STRICT: str = USER_PATTERN_STRICT + "\\/~" # / as separator USER_PATTERN_STRICT_RE: str = "^[" + USER_PATTERN_STRICT + "]+$" PATH_PATTERN_STRICT_RE: str = "^[" + PATH_PATTERN_STRICT + "]+$" @@ -41,8 +41,8 @@ PATH_PATTERN_STRICT_RE: str = "^[" + PATH_PATTERN_STRICT + "]+$" USER_BLACKLIST_MINIMAL: list = [":", "'", '"', '*', '?'] PATH_BLACKLIST_MINIMAL: list = USER_BLACKLIST_MINIMAL -USER_WHITELIST_UNICODE: list = ["-", ".", "@"] # from USER_PATTERN_STRICT -PATH_WHITELIST_UNICODE: list = ["-", ".", "@", "/"] # from PATH_PATTERN_STRICT +USER_WHITELIST_UNICODE: list = ["-", ".", "@", "_"] # from USER_PATTERN_STRICT +PATH_WHITELIST_UNICODE: list = ["-", ".", "@", "_", "/", "~"] # from PATH_PATTERN_STRICT class ApplicationBase: