Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2025-12-18 07:30:12 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

🎨 Do not validate file names when updating existing files https://github.com/siyuan-note/siyuan/issues/16536 (#16539)

Browse source
This commit is contained in:
Jeffrey Chen 2025-12-08 09:05:30 +08:00 • committed by GitHub
parent be53f83c59
commit cb58c643fc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
kernel/api/file.go
View file

@ -380,10 +380,13 @@ func putFile(c *gin.Context) {
return return
} }
if !util.IsValidUploadFileName(filepath.Base(fileAbsPath)) { // Improve kernel API `/api/file/putFile` parameter validation https://github.com/siyuan-note/siyuan/issues/14658 fileExists := filelock.IsExist(fileAbsPath)
ret.Code = http.StatusBadRequest if !fileExists {
ret.Msg = "invalid file path, please check https://github.com/siyuan-note/siyuan/issues/14658 for more details" if !util.IsValidUploadFileName(filepath.Base(fileAbsPath)) { // Improve kernel API `/api/file/putFile` parameter validation https://github.com/siyuan-note/siyuan/issues/14658
return ret.Code = http.StatusBadRequest
ret.Msg = "invalid file path, please check https://github.com/siyuan-note/siyuan/issues/14658 for more details"
return
}
} }
isDirStr := c.PostForm("isDir") isDirStr := c.PostForm("isDir")