Merge pull request #2606 from 0x46616c6b/traversal-fix-2
dont allow directory traversal #2
This commit is contained in:
commit
431c55811f
|
@ -165,7 +165,6 @@ function minify(req, res, next)
|
|||
var plugin = plugins.plugins[library];
|
||||
var pluginPath = plugin.package.realPath;
|
||||
filename = path.relative(ROOT_DIR, pluginPath + libraryPath);
|
||||
filename = filename.replace(/\\/g, '/'); // Windows (safe generally?)
|
||||
} else if (LIBRARY_WHITELIST.indexOf(library) != -1) {
|
||||
// Go straight into node_modules
|
||||
// Avoid `require.resolve()`, since 'mustache' and 'mustache/index.js'
|
||||
|
|
Loading…
Reference in New Issue