diff options
| author | louis <louis@systemli.org> | 2015-04-12 17:12:35 +0200 |
|---|---|---|
| committer | louis <louis@systemli.org> | 2015-04-12 17:12:35 +0200 |
| commit | 0fa7650df8f940ed6b577d79836a78eb09726c4b (patch) | |
| tree | 87987920e7203bf818e594728875719e223f3e6c /src/node | |
| parent | 0dfecb3af77b0b546714c714a52274f55e4437cf (diff) | |
| download | etherpad-lite-0fa7650df8f940ed6b577d79836a78eb09726c4b.zip | |
dont allow directory traversal #2
Diffstat (limited to 'src/node')
| -rw-r--r-- | src/node/utils/Minify.js | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/src/node/utils/Minify.js b/src/node/utils/Minify.js index ba45ab75..3b0be38c 100644 --- a/src/node/utils/Minify.js +++ b/src/node/utils/Minify.js @@ -165,7 +165,6 @@ function minify(req, res, next) var plugin = plugins.plugins[library]; var pluginPath = plugin.package.realPath; filename = path.relative(ROOT_DIR, pluginPath + libraryPath); - filename = filename.replace(/\\/g, '/'); // Windows (safe generally?) } else if (LIBRARY_WHITELIST.indexOf(library) != -1) { // Go straight into node_modules // Avoid `require.resolve()`, since 'mustache' and 'mustache/index.js' |