From 59dd78dfd9cd3ee7f9f7f19e5593e0b578d0f8bb Mon Sep 17 00:00:00 2001 From: Markus Unterwaditzer Date: Mon, 4 Aug 2014 18:34:11 +0200 Subject: [PATCH] Don't check for href prefix anymore This doesn't really serve any security purposes at all. Fix #91 Fix #87 --- vdirsyncer/storage/dav.py | 1 - 1 file changed, 1 deletion(-) diff --git a/vdirsyncer/storage/dav.py b/vdirsyncer/storage/dav.py index 3883f2b..a5f1a16 100644 --- a/vdirsyncer/storage/dav.py +++ b/vdirsyncer/storage/dav.py @@ -294,7 +294,6 @@ class DavStorage(Storage): if not href: raise ValueError(href) x = utils.urlparse.urljoin(self.session.url, href) - assert x.startswith(self.session.url) return utils.compat.urlunquote_plus(utils.urlparse.urlsplit(x).path) def _get_href(self, item):