| commit | f26797923e410c651ea941a780818969f46ac2c8 | [log] [tgz] |
|---|---|---|
| author | Kevin Moore <github@j832.com> | Wed Mar 12 15:33:47 2014 -0700 |
| committer | Kevin Moore <github@j832.com> | Wed Mar 12 15:33:47 2014 -0700 |
| tree | 34b25322f1d4fca773d8ed36d82644db9ac27455 | |
| parent | 3fe8c5edbda999d704e37f771626d20e6f19ea53 [diff] |
notes
diff --git a/lib/shelf_static.dart b/lib/shelf_static.dart index dc22e83..f50c8b2 100644 --- a/lib/shelf_static.dart +++ b/lib/shelf_static.dart
@@ -27,6 +27,7 @@ var resolvedPath = file.resolveSymbolicLinksSync(); + // Do not serve a file outside of the original fileSystemPath if (!p.isWithin(rootPath, resolvedPath)) { throw 'Requested path ${request.pathInfo} resolved to $resolvedPath ' 'is not under $rootPath.';