renun/zfile
1
0
Fork 0
mirror of https://github.com/zfile-dev/zfile.git synced 2025-04-19 05:34:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(bug): 修复本地存储可以通过特殊路径符获取任意目录的 BUG.

Browse Source
This commit is contained in:
zhaojun
2022-04-02 18:24:49 +08:00
parent 60a6a5348c
commit 168b0b08f3
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/main/java/im/zhaojun/zfile/service/impl/LocalServiceImpl.java
View File

@@ -74,7 +74,7 @@ public class LocalServiceImpl extends AbstractBaseFileService implements BaseFil
@Override
public List<FileItemDTO> fileList(String path) throws FileNotFoundException {
if (StrUtil.startWith(path, "..")) {
if (StrUtil.startWith(path, "..") || StrUtil.startWith(path, "/..")) {
return Collections.emptyList();
}
List<FileItemDTO> fileItemList = new ArrayList<>();