raphael/whiteboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix false Attempted path traversal attack - alarm on win

Browse Source
This commit is contained in:
Raphael 2022-01-25 14:20:03 +01:00
parent 45c7f53777
commit 82e02c1db8
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
scripts/utils.js
View File

@ -31,7 +31,8 @@ const getArgs = function () {
const getSafeFilePath = function (rootPath, singleFileSegment) { const getSafeFilePath = function (rootPath, singleFileSegment) {
var filePath = path.join(rootPath, singleFileSegment); var filePath = path.join(rootPath, singleFileSegment);
if ( if (
path.dirname(filePath) !== rootPath || (path.dirname(filePath) !== rootPath &&
path.dirname(filePath) !== rootPath.replace("/", "\\")) ||
path.basename(filePath) !== singleFileSegment || path.basename(filePath) !== singleFileSegment ||
path.normalize(singleFileSegment) !== singleFileSegment path.normalize(singleFileSegment) !== singleFileSegment
) { ) {