GonnaHetzMe/protodump
1
0 Fork 0
mirror of https://github.com/arkadiyt/protodump.git synced 2026-10-23 18:49:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix file traversal

Browse Source
This commit is contained in:
Arkadiy Tetelman authored and Arkadiy Tetelman committed 2026-03-30 18:09:55 -07:00
1 parent e5815840e4
commit cd9602ffac
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
cmd/protodump/main.go
+1 -1
View File
@@ -44,7 +44,7 @@ func writeFile(outputDir string, filename string, content []byte) (string, error
return "", fmt.Errorf("failed to evalsymlinks on %s: %v", eval, err) return "", fmt.Errorf("failed to evalsymlinks on %s: %v", eval, err)
} }
if !strings.HasPrefix(base, outputDirAbs) { if base != outputDirAbs && !strings.HasPrefix(base, outputDirAbs+string(filepath.Separator)) {
return "", fmt.Errorf("invalid filepath: %s", base) return "", fmt.Errorf("invalid filepath: %s", base)
} }