renun/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2025-02-28 05:32:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

🔒 Some security vulnerabilities https://github.com/siyuan-note/siyuan/issues/13426

Browse Source
This commit is contained in:
Daniel
2024-12-11 17:15:54 +08:00
parent 2b5a9f9f1a
commit e70ed57f6e
5 changed files with 28 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
kernel/api/template.go
View File

@@ -80,6 +80,12 @@ func renderTemplate(c *gin.Context) {
return
}
if !util.IsAbsPathInWorkspace(p) {
ret.Code = -1
ret.Msg = "Path [" + p + "] is not in workspace"
return
}
preview := false
if previewArg := arg["preview"]; nil != previewArg {
preview = previewArg.(bool)