diff --git a/gns3server/handlers/api/controller/project_handler.py b/gns3server/handlers/api/controller/project_handler.py index 03930494..77e180be 100644 --- a/gns3server/handlers/api/controller/project_handler.py +++ b/gns3server/handlers/api/controller/project_handler.py @@ -440,7 +440,7 @@ class ProjectHandler: controller = Controller.instance() project = yield from controller.get_loaded_project(request.match_info["project_id"]) path = request.match_info["path"] - path = os.path.normpath(path) + path = os.path.normpath(path).strip("/") # Raise error if user try to escape if path[0] == ".":