mirror of
https://github.com/ether/etherpad-lite.git
synced 2025-04-24 09:26:14 -04:00
fix vulnerability
This commit is contained in:
parent
de67714cf8
commit
6fad2ca39a
1 changed files with 0 additions and 1 deletions
|
@ -145,7 +145,6 @@ function minify(req, res, next)
|
|||
filename = path.normalize(path.join(ROOT_DIR, filename));
|
||||
if (filename.indexOf(ROOT_DIR) == 0) {
|
||||
filename = filename.slice(ROOT_DIR.length);
|
||||
filename = filename.replace(/\\/g, '/'); // Windows (safe generally?)
|
||||
} else {
|
||||
res.writeHead(404, {});
|
||||
res.end();
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue