This commit is contained in:
2026-01-17 12:07:59 +08:00
parent e12908f54f
commit dec540d055
3 changed files with 6 additions and 3 deletions

View File

@@ -1,6 +1,6 @@
import './code/upload.ts'; // import './code/upload.ts';
import './event.ts'; import './event.ts';
import './resources/upload.ts'; import './resources/upload.ts';
import './resources/chunk.ts'; import './resources/chunk.ts';
import './resources/get-resources.ts'; // import './resources/get-resources.ts';

View File

@@ -1,6 +1,9 @@
import { router } from '@/app.ts'; import { router } from '@/app.ts';
import { authMinio } from '../minio/get-minio-resource.ts'; import { authMinio } from '../minio/get-minio-resource.ts';
// 功能可以抽离为某一个dns请求的服务
router.all('/api/s1/share/*splat', async (req, res) => { router.all('/api/s1/share/*splat', async (req, res) => {
try { try {
const url = req.url; const url = req.url;

View File

@@ -8,7 +8,7 @@
*/ */
export const validateDirectory = (directory?: string) => { export const validateDirectory = (directory?: string) => {
// 对directory进行校验不能以/开头,不能以/结尾。不能以.开头,不能以.结尾。 // 对directory进行校验不能以/开头,不能以/结尾。不能以.开头,不能以.结尾。
if (directory && (directory.startsWith('/') || directory.endsWith('/') || directory.startsWith('.') || directory.endsWith('.'))) { if (directory && (directory.startsWith('/') || directory.endsWith('/') || directory.startsWith('..') || directory.endsWith('..'))) {
return { return {
code: 500, code: 500,
message: 'directory is invalid', message: 'directory is invalid',