File: Fix 404 case with secret URLs

2022-12-13 23:17:56 +01:00 · 2022-12-13 23:17:56 +01:00 · d5763a9854
commit d5763a9854
parent aaf0e4492a
1 changed files with 3 additions and 2 deletions
--- a/fhost.py
+++ b/fhost.py
@ -439,10 +439,11 @@ def get(path, secret=None):

    if sufs:
        f = File.query.get(id)
-        if f.secret != secret:
-            abort(404)

        if f and f.ext == sufs:
+            if f.secret != secret:
+                abort(404)
+
            if f.removed:
                abort(451)