Andreas/siyuan
1
0
Fork 0
mirror of https://github.com/siyuan-note/siyuan.git synced 2026-02-08 00:04:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

🔒 Fix https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c4jr-5q7w-f6r9

Browse source 
Signed-off-by: Daniel <845765@qq.com>
This commit is contained in:
Daniel 2026-01-28 21:42:30 +08:00
parent 399a38893e
commit d7f790755e
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
kernel/util/path.go
View file

@ -373,6 +373,7 @@ func IsSensitivePath(p string) bool {
"/etc/ssh",
"/root",
"/etc/ssl",
"/etc/cron.d/",
"/etc/letsencrypt",
"/var/lib/docker",
"/.gnupg",
@ -404,6 +405,7 @@ func IsSensitivePath(p string) bool {
base := filepath.Base(pp)
n := strings.ToLower(base)
sensitiveNames := map[string]struct{}{
".bashrc": {},
".env": {},
".env.local": {},
".npmrc": {},