145
145
urlpath = os.path.normpath(req.path)
146
146
# Now if it begins with ".." or separator, then it's illegal
147
147
if urlpath.startswith("..") or urlpath.startswith(os.sep):
150
150
(owner, _) = util.split_path(urlpath)
155
154
def authorize_public(req):
156
155
"""A different kind of authorization. Rather than making sure the