Changes
2 changed files (+8/-1)
-
-
@@ -131,7 +131,7 @@ func TestRepoTreePreventsPathTraversal(t *testing.T) {server := httptest.NewServer(New(core)) defer server.Close() for _, p := range []string{"/../", "/.././../"} { for _, p := range []string{"/../", "/.././.."} { target, err := url.JoinPath(server.URL, "/foo/tree/trunk") if err != nil { t.Fatal(err)
-
-
-
@@ -36,6 +36,13 @@ func (pages *Pages) ServeHTTP(w http.ResponseWriter, r *http.Request) {return } if strings.HasSuffix(r.URL.Path, "/") { r.URL.Path = strings.TrimRight(r.URL.Path, "/") w.Header().Add("Location", r.URL.String()) w.WriteHeader(http.StatusPermanentRedirect) return } // "/static/<path>*" if strings.Index(r.URL.Path, staticPrefix) == 0 { http.ServeFileFS(w, r, pages.core.StaticDir, strings.TrimPrefix(r.URL.Path, staticPrefix))
-