bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-14 23:07:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Handle malformed static paths

Browse source
This commit is contained in:
Codex Microtask Operator 2026-06-12 18:35:13 +02:00
parent 8f4691584c
commit b10efcc1bf
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apps/commandboard-web/server.js
View file

@ -48,7 +48,12 @@ createServer((request, response) => {
}); });
function resolveStaticPath(pathname) { function resolveStaticPath(pathname) {
const decodedPath = decodeURIComponent(pathname); let decodedPath;
try {
decodedPath = decodeURIComponent(pathname);
} catch {
return null;
}
const normalizedPath = normalize(decodedPath).replace(/^(\.\.[/\\])+/, ""); const normalizedPath = normalize(decodedPath).replace(/^(\.\.[/\\])+/, "");
let candidate = join(distDirectory, normalizedPath); let candidate = join(distDirectory, normalizedPath);