Placing #anything behind url will ignore the stricted folder and show root.

ctf0 / Laravel-Media-Manager

A "Vuejs & Laravel" Media Manager With Tons of Features

MIT License

829 stars 179 forks source link

Placing #anything behind url will ignore the stricted folder and show root. #72

Closed doitonlinemedia closed 5 years ago

doitonlinemedia commented 5 years ago

What version of Laravel are you using? (nothing lower than v5.4).

Laravel 5.7

is it an issue related to installation or usage ?

Usage

what is the error you are getting ?

No error, but manager is showing the files from the root folder if hashtag is in url, while restricted folder is set. Reloading the page fixes it for that url. Renewing the url with #somethingdifferent bugs again until refresh

Do You Know A Solution For this Issue ?

Nope :(

ctf0 commented 5 years ago

the way it happens right now is we get the url and split it into segments so we compare them against the restricted paths, i can check for some special chars and remove them from those segments but that means that i will also have to restrict them from folders names when the user create/rename folders.

ctf0 commented 5 years ago

@doitonlinemedia i've updated the url path check to remove the hashbang # from it, plz update ur copy with url.js and recheck if it solves the issue