From a2a71f495ff4e90da41e896bab5fd116a9ab68c5 Mon Sep 17 00:00:00 2001 From: zhiren Date: Tue, 4 Jul 2023 15:44:34 -0400 Subject: [PATCH] update the config creation logic to avoid the injection --- app/configs/user_config.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app/configs/user_config.py b/app/configs/user_config.py index 6ecd0d6b..3893de1c 100644 --- a/app/configs/user_config.py +++ b/app/configs/user_config.py @@ -5,6 +5,7 @@ import configparser import os import time +from pathlib import Path from app.configs.app_config import AppConfig from app.models.singleton import Singleton @@ -24,7 +25,7 @@ def __init__(self): if not os.path.exists(AppConfig.Env.user_config_path): os.makedirs(AppConfig.Env.user_config_path) if not os.path.exists(AppConfig.Env.user_config_file): - os.system(r'touch {}'.format(AppConfig.Env.user_config_file)) + Path.touch(Path(AppConfig.Env.user_config_file)) self.config = configparser.ConfigParser() self.config.read(AppConfig.Env.user_config_file) if not self.config.has_section('USER'):