beego: fixed serious Directory Traversal

18fee2ad · astaxie · 41247607 · 18fee2ad
Commit 18fee2ad authored Apr 08, 2014 by astaxie
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

staticfile.go staticfile.go +1 -1

No files found.
--- a/staticfile.go
+++ b/staticfile.go
@@ -13,7 +13,7 @@ import (
 )

 func serverStaticRouter(ctx *context.Context) bool {
-	requestPath := ctx.Input.Request.URL.Path
+	requestPath := path.Clean(ctx.Input.Request.URL.Path)
 	for prefix, staticDir := range StaticDir {
 		if len(prefix) == 0 {
 			continue