Argument Injection in /manage/ssh/ via host parameter leads to sensitive file disclosure on Weblate

Describe the security issue you would like to report

def ssh(request):
    """Show information and manipulate with SSH key."""
    # Check whether we can generate SSH key
    can_generate = can_generate_key()

    # Grab action type
    action = request.POST.get("action")

    # Generate key if it does not exist yet
    if can_generate and action == …