Pārlūkot izejas kodu

Fixed filename contain two dot cannot open bug

Toby Chui 3 gadi atpakaļ
vecāks
revīzija
0e2e21e458
1 mainītis faili ar 1 papildinājumiem un 1 dzēšanām
  1. 1 1
      mod/user/directoryHandler.go

+ 1 - 1
mod/user/directoryHandler.go

@@ -86,7 +86,7 @@ func (u *User) VirtualPathToRealPath(vpath string) (string, error) {
 		return "", err
 	}
 
-	if strings.Contains(filepath.Clean(subpath), "..") {
+	if strings.Contains(filepath.ToSlash(filepath.Clean(subpath)), "../") || filepath.Clean(subpath) == ".." {
 		return "", errors.New("Request path out of storage root")
 	}