rei-mirrors/dockview
1
0
Fork 0
mirror of https://github.com/mathuo/dockview synced 2025-03-09 23:42:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #759 from JafarAkhondali/master

Browse Source 
Fixing a Path Traversal Vulnerability
This commit is contained in:
mathuo 2024-11-10 10:42:03 +00:00 committed by GitHub
commit 93b29e77c4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packages/docs/web-server/index.mjs
View File

@ -35,5 +35,10 @@ function write(res, file) {
http.createServer((req, res) => {
const route = req.url.split('/').slice(1);
if (route.includes('..')) {
res.writeHead(403);
res.end('');
return;
}
write(res, route);
}).listen(PORT, HOST);