Initial push support (needs API key, no tests yet)

1 files changed, 18 insertions, 0 deletions

diff --git a/license_protected_downloads/common.py b/license_protected_downloads/common.py
new file mode 100644
index 0000000..0ad534a
--- /dev/null
+++ b/license_protected_downloads/common.py
@@ -0,0 +1,18 @@
+import os
+
+def safe_path_join(base_path, *paths):
+    """os.path.join with with check that result is inside base_path.
+
+    Checks that the generated path doesn't end up outside the target
+    directory, so server accesses stay where we expect them.
+    """
+
+    target_path = os.path.join(base_path, *paths)
+
+    if not target_path.startswith(base_path):
+        return None
+
+    if not os.path.normpath(target_path) == target_path.rstrip("/"):
+        return None
+
+    return target_path