diff options
| author | Xavier Del Campo Romero <xavi.dcr@tutanota.com> | 2025-01-23 23:24:22 +0100 |
|---|---|---|
| committer | Xavier Del Campo Romero <xavi.dcr@tutanota.com> | 2025-01-23 23:41:03 +0100 |
| commit | 3e618c2d0f1d489e13ed1f45b5a9068936c05743 (patch) | |
| tree | 217a45cc0d471044e0b6ca72e5f9c9ddca8bc516 | |
| parent | 9752843329a257542c34798d65e829a6cff7764b (diff) | |
| download | slcl-3e618c2d0f1d489e13ed1f45b5a9068936c05743.tar.gz | |
main.c: Require paths with leading '/' on sharing
When sharing, paths must be expressed as an absolute path e.g.:
/path/to/file .
| -rw-r--r-- | main.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -821,7 +821,7 @@ static int share(const struct http_payload *const p, const char *const path = forms->value, *const username = p->cookie.field; struct stat sb; - if (path_invalid(path)) + if (path_invalid(path) || *path != '/') { fprintf(stderr, "%s: invalid path %s\n", __func__, path); ret = page_bad_request(r); |
