def cat_picture():
image_name = request.args.get('image_name')
if not '..' in image_name:
return 404
return send_file(os.path.join(os.getcwd(), image_name))
微信
公众号
扫码关注公众号