Use Absolutize for files that do not exist
Canonicalize relies on the file existing to resolve the potential traversal, which won't work for file upload in case the file name has a traversal inside it.
This commit is contained in:
1 parent
6c9c80f61d
commit
eccb45ced0
4 files changed
+29
-16
No files matched your search
@@ -26,3 +26,4 @@ walkdir = "2"
|
||||
rayon = "1.3"
|
||||
notify = "4.0"
|
||||
tokio = "0.2"
|
||||
path-absolutize = "3.0.6"
|
||||
Reference in new issue
Block a user