william-os4y/fapws3 — pull request #40 by ez47 (2014-07-30 20:07:47+00:00)
Title: Temporary Fix for Directory Traversal.

Fixes #38 in my build is by removing double punctation.

fpath = fpath.replace("..", "")

That way

/static/..%2f..%2f..%2f..%2f..%2f/etc/passwd

becomes

/static//////etc/passwd or /static/etc/passwd.