fix: trim symlink root path prefix (#38)

pull/3756/head
Laurynas Gadliauskas 2023-02-24 14:22:08 +02:00 committed by GitHub
parent e22451dfbf
commit 71763d08b9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions

View File

@ -85,13 +85,20 @@ var resourceGetHandler = withUser(func(w http.ResponseWriter, r *http.Request, d
// remove symlinks that link outside base path
if fi.IsSymlink {
link := fi.Link
if !filepath.IsAbs(link) {
isAbs := filepath.IsAbs(link)
if !isAbs {
link = filepath.Join(d.user.FullPath(file.Path), link)
}
link = filepath.Clean(link)
if !strings.HasPrefix(link, d.server.Root) {
return false
}
if isAbs {
fi.Link = strings.TrimPrefix(link, d.server.Root)
}
}
return true