thomas/hass-lovelace_gen
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add support for directory traversal

Browse Source
This commit is contained in:
Matchlighter 2019-11-12 20:41:03 -07:00 committed by Thomas Lovén
parent 400b14b6ab
commit c9495d3bbc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
custom_components/lovelace_gen/__init__.py
View File

@ -42,7 +42,7 @@ def _include_yaml(ldr, node):
fn = node.value fn = node.value
else: else:
fn, args, *_ = ldr.construct_sequence(node) fn, args, *_ = ldr.construct_sequence(node)
fname = os.path.join(os.path.dirname(ldr.name), fn) fname = os.path.abspath(os.path.join(os.path.dirname(ldr.name), fn))
try: try:
return loader._add_reference(load_yaml(fname, args), ldr, node) return loader._add_reference(load_yaml(fname, args), ldr, node)
except FileNotFoundError as exc: except FileNotFoundError as exc: