From cc536a36b31e845bee158b0dbb17216a3592de59 Mon Sep 17 00:00:00 2001 From: ChaoticByte Date: Wed, 28 Aug 2024 10:25:44 +0200 Subject: [PATCH] Allow singe dots in page path, fix #1 --- main.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/main.go b/main.go index 9b29021..b3abde5 100644 --- a/main.go +++ b/main.go @@ -30,7 +30,7 @@ func handleApplication(w http.ResponseWriter, req *http.Request) { var err error entryName := strings.Trim(req.URL.Path, "/") if entryName != "" { - if strings.Contains(entryName, "/") || strings.Contains(entryName, ".") { + if strings.Contains(entryName, "/") || strings.Contains(entryName, "..") { // path traversal logger.Println("Possible path traversal attempt from", req.RemoteAddr, "to", entryName) w.WriteHeader(http.StatusForbidden)