Merge remote-tracking branch 'origin/stable'

This commit is contained in:
David Lord 2024-11-13 08:43:48 -08:00
commit 22c48a738b
No known key found for this signature in database
GPG key ID: 43368A7AA8CC5926
9 changed files with 23 additions and 6 deletions

View file

@ -547,7 +547,8 @@ def send_from_directory(
raises a 404 :exc:`~werkzeug.exceptions.NotFound` error.
:param directory: The directory that ``path`` must be located under,
relative to the current application's root path.
relative to the current application's root path. This *must not*
be a value provided by the client, otherwise it becomes insecure.
:param path: The path to the file to send, relative to
``directory``.
:param kwargs: Arguments to pass to :func:`send_file`.