1 files changed, 3 insertions, 0 deletions
diff --git a/fhost.py b/fhost.py
index 2814a96..293e88e 100755
--- a/fhost.py
+++ b/fhost.py
@@ -284,6 +284,9 @@ def store_url(url, addr):
 @app.route("/<path:path>")
 def get(path):
     p = os.path.splitext(path)
+    if any(not c in su.alphabet for c in p[0]):
+        abort(404)
+
     id = su.debase(p[0])
 
     if p[1]: