assert sanitized and stripped paths

2018-08-28 16:19:50 +02:00
parent c08754cf92
commit 5429f5c1a9
19 changed files with 108 additions and 72 deletions
--- a/radicale/rights/authenticated.py
+++ b/radicale/rights/authenticated.py
@@ -27,7 +27,7 @@ class Rights(rights.BaseRights):
    def authorized(self, user, path, permissions):
        if self._verify_user and not user:
            return ""
-        sane_path = pathutils.sanitize_path(path).strip("/")
+        sane_path = pathutils.strip_path(path)
        if "/" not in sane_path:
            return rights.intersect_permissions(permissions, "RW")
        if sane_path.count("/") == 1: