Cutlery/caddy
1
0
Fork 0
mirror of https://github.com/caddyserver/caddy.git synced 2025-11-04 03:27:23 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

fileserver: Don't replace in request paths (fix #4027)

Browse Source
This commit is contained in:
Matthew Holt 2021-03-01 13:49:13 -07:00
parent ec309c6d52
commit 5bf0a55df4
No known key found for this signature in database
GPG Key ID: 2A349DD577D586A5
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
modules/caddyhttp/fileserver/staticfiles.go
View File

@ -138,12 +138,11 @@ func (fsrv *FileServer) ServeHTTP(w http.ResponseWriter, r *http.Request, next c
filesToHide := fsrv.transformHidePaths(repl) filesToHide := fsrv.transformHidePaths(repl)
root := repl.ReplaceAll(fsrv.Root, ".") root := repl.ReplaceAll(fsrv.Root, ".")
suffix := repl.ReplaceAll(r.URL.Path, "") filename := sanitizedPathJoin(root, r.URL.Path)
filename := sanitizedPathJoin(root, suffix)
fsrv.logger.Debug("sanitized path join", fsrv.logger.Debug("sanitized path join",
zap.String("site_root", root), zap.String("site_root", root),
zap.String("request_path", suffix), zap.String("request_path", r.URL.Path),
zap.String("result", filename)) zap.String("result", filename))
// get information about the file // get information about the file