mirror of https://github.com/gogs/gogs.git
24 lines
680 B
Go
24 lines
680 B
Go
// Copyright 2018 The Gogs Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package tool
|
|
|
|
import (
|
|
"strings"
|
|
)
|
|
|
|
// IsSameSiteURLPath returns true if the URL path belongs to the same site, false otherwise.
|
|
// False: //url, http://url, /\url
|
|
// True: /url
|
|
func IsSameSiteURLPath(url string) bool {
|
|
return len(url) >= 2 && url[0] == '/' && url[1] != '/' && url[1] != '\\'
|
|
}
|
|
|
|
// SanitizePath sanitizes user-defined file paths to prevent remote code execution.
|
|
func SanitizePath(path string) string {
|
|
path = strings.TrimLeft(path, "/")
|
|
path = strings.Replace(path, "../", "", -1)
|
|
return path
|
|
}
|