site: support files in directories in /repl/local/

pull/2945/head
Conduitry 6 years ago
parent f7e6b32885
commit 3dbf7d84ed

@ -1,12 +1,13 @@
import { createReadStream } from 'fs'; import { createReadStream } from 'fs';
export function get(req, res) { export function get(req, res) {
if (process.env.NODE_ENV !== 'development' || !/^[a-z.]+$/.test(req.params.file)) { const path = req.params.file.join('/');
if (process.env.NODE_ENV !== 'development' || ('/' + path).includes('/.')) {
res.writeHead(403); res.writeHead(403);
res.end(); res.end();
return; return;
} }
createReadStream('../' + req.params.file) createReadStream('../' + path)
.on('error', () => { .on('error', () => {
res.writeHead(403); res.writeHead(403);
res.end(); res.end();
Loading…
Cancel
Save