fix: windows判断文件路径

Author: yqchilde

engine/robot/http.go

@@ -3,7 +3,7 @@ package robot
 import (
 	"fmt"
 	"net/http"
-	"path/filepath"
+	"runtime"
 	"strings"
 
 	"github.com/gin-gonic/gin"
@@ -53,10 +53,19 @@ func runServer(c *Config) {
 			c.String(http.StatusInternalServerError, "Warning: 非法访问")
 			return
 		}
-		if !strings.HasPrefix(filename, filepath.Join("data", "plugins")) && !strings.HasPrefix(filename, filepath.Join(".", "data", "plugins")) {
-			log.Errorf("[http] 非法访问静态文件: %s", filename)
-			c.String(http.StatusInternalServerError, "Warning: 非法访问")
-			return
+		switch runtime.GOOS {
+		case "windows":
+			if !strings.HasPrefix(filename, "data\\plugins") && !strings.HasPrefix(filename, ".\\data\\plugins") {
+				log.Errorf("[http] 非法访问静态文件: %s", filename)
+				c.String(http.StatusInternalServerError, "Warning: 非法访问")
+				return
+			}
+		default:
+			if !strings.HasPrefix(filename, "data/plugins") && !strings.HasPrefix(filename, "./data/plugins") {
+				log.Errorf("[http] 非法访问静态文件: %s", filename)
+				c.String(http.StatusInternalServerError, "Warning: 非法访问")
+				return
+			}
 		}
 		c.File(filename)
 	})