We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent f7e6b32 commit daf3295Copy full SHA for daf3295
site/src/routes/repl/local/[file].js renamed to site/src/routes/repl/local/[...file].js
@@ -1,12 +1,12 @@
1
import { createReadStream } from 'fs';
2
3
export function get(req, res) {
4
- if (process.env.NODE_ENV !== 'development' || !/^[a-z.]+$/.test(req.params.file)) {
+ if (process.env.NODE_ENV !== 'development') {
5
res.writeHead(403);
6
res.end();
7
return;
8
}
9
- createReadStream('../' + req.params.file)
+ createReadStream('../' + req.params.file.join('/'))
10
.on('error', () => {
11
12
0 commit comments