v3.1.1 init

- Fixed path traverse bug in web server file manager
- Merged docker container list from main
- Updated version code
- Merged network status fix from PR
- Removed unused comments in dpcore
-
This commit is contained in:
tobychui
2024-08-07 13:53:43 +08:00
parent 1d965da7d0
commit a5ef6456c6
6 changed files with 22 additions and 22 deletions

View File

@@ -42,6 +42,10 @@ func (fm *FileManager) HandleList(w http.ResponseWriter, r *http.Request) {
// Construct the absolute path to the target directory
targetDir := filepath.Join(fm.Directory, directory)
// Clean path to prevent path escape #274
targetDir = filepath.ToSlash(filepath.Clean(targetDir))
targetDir = strings.ReplaceAll(targetDir, "../", "")
// Open the target directory
dirEntries, err := os.ReadDir(targetDir)
if err != nil {