search

o-p-n / serveit

MIT License
0 stars 1 forks source link

fix: out-of-tree data exposure possible #47

Open linuxwolf opened 1 day ago

linuxwolf commented 1 day ago

The filesystem path is not normalized before attempting to locate and open a file, which could allow relative path segments in the URL path to load files outside of the SERVEIT_DIR directory tree.

fixes #43

codecov[bot] commented 1 day ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (6a41eb8) to head (80bcc3e).

:white_check_mark: All tests successful. No failed tests found.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #47 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 8 8 Lines 373 373 Branches 39 39 ========================================= Hits 373 373 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.