sanitisation check

d-j-hatton · d-j-hatton · commit 149c0f0f609d · 2025-03-27T10:40:27.000Z
diff --git a/src/murfey/instrument_server/api.py b/src/murfey/instrument_server/api.py
@@ -148,7 +148,7 @@ def start_multigrid_watcher(
         if controller.dormant:
             del controllers[sid]
             requests.delete(
-                f"{_get_murfey_url()}/sessions/{sid}",
+                f"{_get_murfey_url()}/sessions/{sanitise_nonpath(str(sid))}",
                 headers={"Authorization": f"Bearer {tokens[sid]}"},
             )
     controllers[session_id] = MultigridController(

Original file line number	Diff line number	Diff line change
`@@ -148,7 +148,7 @@ def start_multigrid_watcher(`
`148`	`148`	`if controller.dormant:`
`149`	`149`	`del controllers[sid]`
`150`	`150`	`requests.delete(`
`151`		`- f"{_get_murfey_url()}/sessions/{sid}",`
	`151`	`+ f"{_get_murfey_url()}/sessions/{sanitise_nonpath(str(sid))}",`
`152`	`152`	`headers={"Authorization": f"Bearer {tokens[sid]}"},`
`153`	`153`	`)`
`154`	`154`	`controllers[session_id] = MultigridController(`