Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-03-04 20:00:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

🔒 https://github.com/siyuan-note/siyuan/security/advisories/GHSA-5vwq-4757-x99q

Browse source 
Signed-off-by: Daniel <845765@qq.com>
This commit is contained in:
Daniel 2026-03-02 22:54:24 +08:00
parent 2739def842
commit 3c6b784ffd
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
kernel/api/asset.go
View file

@ -65,6 +65,11 @@ func statAsset(c *gin.Context) {
return
}
if !util.IsAbsPathInWorkspace(p) {
ret.Code = 1
return
}
info, err := os.Stat(p)
if err != nil {
ret.Code = 1