Skip to content

W
wiki-js
Unverified Commit 414033de authored by NGPixel's avatar NGPixel
Browse files
Options

fix: asset path traversal on windows

parent 112d0707
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 0 deletions
server/helpers/page.js
View file @ 414033de
...@@ -35,6 +35,8 @@ module.exports = { ...@@ -35,6 +35,8 @@ module.exports = {
rawPath = rawPath.replace(unsafeCharsRegex, '') rawPath = rawPath.replace(unsafeCharsRegex, '')
if (rawPath === '') { rawPath = 'home' } if (rawPath === '') { rawPath = 'home' }
rawPath = rawPath.replaceAll('\\', '').replaceAll('//', '').replaceAll(/\.\.+/ig, '')
// Extract Info // Extract Info
let pathParts = _.filter(_.split(rawPath, '/'), p => { let pathParts = _.filter(_.split(rawPath, '/'), p => {
p = _.trim(p) p = _.trim(p)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment