![Peter Korsgaard](/assets/img/avatar_default.png)
Fixes the following security issue: - CVE-2020-25032: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format. Also drop outdated md5 checksum and fix .hash indentation. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
15 lines
570 B
Makefile
15 lines
570 B
Makefile
################################################################################
|
|
#
|
|
# python-flask-cors
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_FLASK_CORS_VERSION = 3.0.9
|
|
PYTHON_FLASK_CORS_SOURCE = Flask-Cors-$(PYTHON_FLASK_CORS_VERSION).tar.gz
|
|
PYTHON_FLASK_CORS_SITE = https://files.pythonhosted.org/packages/99/fc/cd117ea122e28037a5ec60356a7ffae8b77af527713f7b5e4eb63089f669
|
|
PYTHON_FLASK_CORS_SETUP_TYPE = setuptools
|
|
PYTHON_FLASK_CORS_LICENSE = MIT
|
|
PYTHON_FLASK_CORS_LICENSE_FILES = LICENSE
|
|
|
|
$(eval $(python-package))
|