mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity

#3461 fix security issue of REAMDE path in create repository

This commit is contained in:
Unknwon 2016-08-15 02:35:54 -07:00
parent 5e89485cec
commit cc647ba9d5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
models/repo.go
View File

@ -870,7 +870,7 @@ type CreateRepoOptions struct {
} }
func getRepoInitFile(tp, name string) ([]byte, error) { func getRepoInitFile(tp, name string) ([]byte, error) {
relPath := path.Join("conf", tp, name) relPath := path.Join("conf", tp, strings.TrimLeft(name, "./"))
// Use custom file when available. // Use custom file when available.
customPath := path.Join(setting.CustomPath, relPath) customPath := path.Join(setting.CustomPath, relPath)