marker/shuffle-cracked
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

BUG: Fixed transactional issue with workflowexecutions

Browse Source
This commit is contained in:
frikky
2020-12-01 15:15:19 +01:00
parent 68296d5af7
commit 099e73916e
2 changed files with 46 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/go-app/files.go
+1 -1
View File
@@ -683,7 +683,7 @@ func handleCreateFile(resp http.ResponseWriter, request *http.Request) {
}
}
if strings.Contains(curfile.Filename, "/") || strings.Contains(curfile.Filename, `"`) || strings.Contains(curfile.Filename, "..") {
if strings.Contains(curfile.Filename, "/") || strings.Contains(curfile.Filename, `"`) || strings.Contains(curfile.Filename, "..") || strings.Contains(curfile.Filename, "~") {
resp.WriteHeader(401)
resp.Write([]byte(`{"success": false, "reason": "Invalid characters in filename"}`))
return