Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-03-04 20:00:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

🔒 Authentication is performed on paths such as widgets, plugins, and templates https://github.com/siyuan-note/siyuan/issues/17118

Browse source 
Signed-off-by: Daniel <845765@qq.com>
This commit is contained in:
Daniel 2026-03-02 18:04:43 +08:00
parent 119f78a952
commit 383519027c
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
1 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

14
kernel/server/serve.go
View file

@ -342,19 +342,23 @@ func serveExport(ginServer *gin.Engine) {
}
func serveWidgets(ginServer *gin.Engine) {
ginServer.Static("/widgets/", filepath.Join(util.DataDir, "widgets"))
widgets := ginServer.Group("/widgets/", model.CheckAuth)
widgets.Static("", filepath.Join(util.DataDir, "widgets"))
}
func servePlugins(ginServer *gin.Engine) {
ginServer.Static("/plugins/", filepath.Join(util.DataDir, "plugins"))
plugins := ginServer.Group("/plugins/", model.CheckAuth)
plugins.Static("", filepath.Join(util.DataDir, "plugins"))
}
func serveEmojis(ginServer *gin.Engine) {
ginServer.Static("/emojis/", filepath.Join(util.DataDir, "emojis"))
emojis := ginServer.Group("/emojis/", model.CheckAuth)
emojis.Static("", filepath.Join(util.DataDir, "emojis"))
}
func serveTemplates(ginServer *gin.Engine) {
ginServer.Static("/templates/", filepath.Join(util.DataDir, "templates"))
templates := ginServer.Group("/templates/", model.CheckAuth)
templates.Static("", filepath.Join(util.DataDir, "templates"))
}
func servePublic(ginServer *gin.Engine) {
@ -363,7 +367,7 @@ func servePublic(ginServer *gin.Engine) {
}
func serveSnippets(ginServer *gin.Engine) {
ginServer.Handle("GET", "/snippets/*filepath", func(c *gin.Context) {
ginServer.Handle("GET", "/snippets/*filepath", model.CheckAuth, func(c *gin.Context) {
filePath := strings.TrimPrefix(c.Request.URL.Path, "/snippets/")
ext := filepath.Ext(filePath)
name := strings.TrimSuffix(filePath, ext)