ApfelTeeSaft/Reload-Backend
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/Reload-Backend.git synced 2026-08-26 19:33:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix path traversal exploit (Ty Lawin0129)

Browse Source 
Co-Authored-By: Lawin <[email protected]>
This commit is contained in:
Burlone
2024-11-28 18:16:07 +01:00
co-authored by Lawin
parent dd0a010479
commit 154dd93da2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/cloudstorage.js
+1 -1
View File
@@ -41,7 +41,7 @@ app.get("/fortnite/api/cloudstorage/system/:file", (req, res) => {
if (req.params.file.includes("..")) return res.status(404).end();
if (req.params.file.includes("~")) return res.status(404).end();
const file = path.join(__dirname, "..", "CloudStorage", req.params.file);
const file = path.join(__dirname, "..", "CloudStorage", path.basename(req.params.file));
if (fs.existsSync(file)) return res.status(200).send(fs.readFileSync(file));