diff options
| author | John McLear <john@mclear.co.uk> | 2015-04-12 18:27:18 +0100 |
|---|---|---|
| committer | John McLear <john@mclear.co.uk> | 2015-04-12 18:27:18 +0100 |
| commit | 431c55811ff98fc850a42e99d7614b95032c20ce (patch) | |
| tree | 87987920e7203bf818e594728875719e223f3e6c /src | |
| parent | 0dfecb3af77b0b546714c714a52274f55e4437cf (diff) | |
| parent | 0fa7650df8f940ed6b577d79836a78eb09726c4b (diff) | |
| download | etherpad-lite-431c55811ff98fc850a42e99d7614b95032c20ce.zip | |
Merge pull request #2606 from 0x46616c6b/traversal-fix-2
dont allow directory traversal #2
Diffstat (limited to 'src')
| -rw-r--r-- | src/node/utils/Minify.js | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/src/node/utils/Minify.js b/src/node/utils/Minify.js index ba45ab75..3b0be38c 100644 --- a/src/node/utils/Minify.js +++ b/src/node/utils/Minify.js @@ -165,7 +165,6 @@ function minify(req, res, next) var plugin = plugins.plugins[library]; var pluginPath = plugin.package.realPath; filename = path.relative(ROOT_DIR, pluginPath + libraryPath); - filename = filename.replace(/\\/g, '/'); // Windows (safe generally?) } else if (LIBRARY_WHITELIST.indexOf(library) != -1) { // Go straight into node_modules // Avoid `require.resolve()`, since 'mustache' and 'mustache/index.js' |