add support for directory traversal

2019-11-12 20:41:03 -07:00 · 2019-11-12 20:41:03 -07:00 · c9495d3bbc
commit c9495d3bbc
parent 400b14b6ab
1 changed files with 1 additions and 1 deletions
--- a/custom_components/lovelace_gen/init.py
+++ b/custom_components/lovelace_gen/init.py
@ -42,7 +42,7 @@ def _include_yaml(ldr, node):
        fn = node.value
    else:
        fn, args, *_ = ldr.construct_sequence(node)
-    fname = os.path.join(os.path.dirname(ldr.name), fn)
+    fname = os.path.abspath(os.path.join(os.path.dirname(ldr.name), fn))
    try:
        return loader._add_reference(load_yaml(fname, args), ldr, node)
    except FileNotFoundError as exc: