USEFULL/gogs
1
0
Fork 0
mirror of https://github.com/gogs/gogs.git synced 2025-10-07 23:21:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

pkg/tool/path: handle Windows path separators (#5558)

Browse Source
This commit is contained in:
Unknwon 2018-12-19 22:56:36 -05:00
parent d4f9fd7204
commit 8c8c37a66b
No known key found for this signature in database
GPG Key ID: 25B575AE3213B2B3
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/tool/path.go
View File

@ -19,5 +19,6 @@ func IsSameSiteURLPath(url string) bool {
func SanitizePath(path string) string { func SanitizePath(path string) string {
path = strings.TrimLeft(path, "/") path = strings.TrimLeft(path, "/")
path = strings.Replace(path, "../", "", -1) path = strings.Replace(path, "../", "", -1)
path = strings.Replace(path, "..\\", "", -1)
return path return path
} }

3
pkg/tool/path_test.go
View File

@ -39,8 +39,11 @@ func Test_SanitizePath(t *testing.T) {
}{ }{
{"../../../../../../../../../data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8", "data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8"}, {"../../../../../../../../../data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8", "data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8"},
{"data/gogs/../../../../../../../../../data/sessions/a/9/a9f0ab6c3ef63dd8", "data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8"}, {"data/gogs/../../../../../../../../../data/sessions/a/9/a9f0ab6c3ef63dd8", "data/gogs/data/sessions/a/9/a9f0ab6c3ef63dd8"},
{"..\\..\\..\\..\\..\\..\\..\\..\\..\\data\\gogs\\data\\sessions\\a\\9\\a9f0ab6c3ef63dd8", "data\\gogs\\data\\sessions\\a\\9\\a9f0ab6c3ef63dd8"},
{"data\\gogs\\..\\..\\..\\..\\..\\..\\..\\..\\..\\data\\sessions\\a\\9\\a9f0ab6c3ef63dd8", "data\\gogs\\data\\sessions\\a\\9\\a9f0ab6c3ef63dd8"},
{"data/sessions/a/9/a9f0ab6c3ef63dd8", "data/sessions/a/9/a9f0ab6c3ef63dd8"}, {"data/sessions/a/9/a9f0ab6c3ef63dd8", "data/sessions/a/9/a9f0ab6c3ef63dd8"},
{"data\\sessions\\a\\9\\a9f0ab6c3ef63dd8", "data\\sessions\\a\\9\\a9f0ab6c3ef63dd8"},
} }
for _, tc := range testCases { for _, tc := range testCases {
So(SanitizePath(tc.path), ShouldEqual, tc.expect) So(SanitizePath(tc.path), ShouldEqual, tc.expect)