New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

return 403 if file outside server root is requested (fix #33) #38

Merged
merged 1 commit into from Jul 9, 2016

Conversation

Projects
None yet
2 participants
@tynovsky
Contributor

tynovsky commented Mar 29, 2015

This provides a fix for issue #33. Using Cwd's realpath, get the absolute path of requested file and check if it is in t/html directory (server's root). I slightly refactored the code to avoid code repetition with 404 error.

@petdance petdance added the bug label Jul 5, 2016

@petdance petdance merged commit 026bca7 into petdance:dev Jul 9, 2016

@petdance

This comment has been minimized.

Owner

petdance commented Jul 9, 2016

Merged, Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment