simple-learning

Simple learning web program
git clone git://git.laack.co/simple-learning.git
Log | Files | Refs | README | LICENSE
commit ed59c2a4cb8d75bbc20423c36a28be8e5eac146f
parent 0cc6dc08624db4f84d7fba5d65169b53930f0d61
Author: Andrew Laack <andrew@laack.co>
Date:   Sun, 30 Aug 2026 20:17:21 -0500

fix path regression

Diffstat:

Mlearning/bin/main.ml | 6+++++-


1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/learning/bin/main.ml b/learning/bin/main.ml
@@ -1,10 +1,14 @@
 open Jingoo 
 
+(*TODO: Make this a whitelist based on the page / course lists*)
+
 let is_safe_path name = 
   String.length name > 0
+  && name <> "."
+  && name <> ".."
   && String.for_all (fun c ->
        (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z')
-       || (c >= '0' && c <= '9') || c = '-' || c = '_') name
+       || (c >= '0' && c <= '9') || c = '-' || c = '_' || c = '.') name
 
 let () =
     Dream.run