Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-03-09 14:12:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

🎨 Plugin supports saving data in subdirectories (#17007)

Browse source
This commit is contained in:
Jeffrey Chen 2026-02-11 20:48:19 +08:00 • committed by GitHub
parent 4257986729
commit b37d0c1c5b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 54 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

23
app/src/util/pathName.ts
View file

@ -715,3 +715,26 @@ export const setNoteBook = (cb?: (notebook: INotebook[]) => void, flashcard = fa
}
});
};
/**
* 规范化并校验相对路径：允许子目录，但禁止通过 ".." 穿越到根外。
* 用于插件存储，确保路径不逃出指定根目录。
* @returns 规范化后的相对路径（使用 /），若路径非法则返回 null
*/
export const normalizeStoragePath = (storageName: string): string | null => {
const normalized = storageName.replace(/\\/g, "/");
const parts = normalized.split("/").filter(Boolean);
const resolved: string[] = [];
for (const part of parts) {
if (part === "..") {
if (resolved.length > 0) {
resolved.pop();
} else {
return null;
}
} else if (part !== ".") {
resolved.push(part);
}
}
return resolved.length > 0 ? resolved.join("/") : null;
};