fix: forbidden filtering
This commit is contained in:
1 parent
94fedcbc91
commit
bfc55b0646
1 file changed
-6
@@ -26,12 +26,6 @@ pub(super) fn desktop_handler(request: &Request, asset_root: Option<PathBuf>) ->
|
|||||||
|
|
||||||
let asset = asset_root.join(trimmed).canonicalize()?;
|
let asset = asset_root.join(trimmed).canonicalize()?;
|
||||||
|
|
||||||
if !asset.starts_with(asset_root) {
|
|
||||||
return ResponseBuilder::new()
|
|
||||||
.status(StatusCode::FORBIDDEN)
|
|
||||||
.body(String::from("Forbidden").into_bytes());
|
|
||||||
}
|
|
||||||
|
|
||||||
if !asset.exists() {
|
if !asset.exists() {
|
||||||
return ResponseBuilder::new()
|
return ResponseBuilder::new()
|
||||||
.status(StatusCode::NOT_FOUND)
|
.status(StatusCode::NOT_FOUND)
|
||||||
|
|||||||
Reference in new issue
Block a user