lavender-legacy
/
gitea
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

#3461 fix security issue of REAMDE path in create repository

release/v1.15
Unknwon 2016-08-15 02:35:54 -07:00
parent 5e89485cec
commit cc647ba9d5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
models/repo.go
View File

@ -870,7 +870,7 @@ type CreateRepoOptions struct {
} }
func getRepoInitFile(tp, name string) ([]byte, error) { func getRepoInitFile(tp, name string) ([]byte, error) {
relPath := path.Join("conf", tp, name) relPath := path.Join("conf", tp, strings.TrimLeft(name, "./"))
// Use custom file when available. // Use custom file when available.
customPath := path.Join(setting.CustomPath, relPath) customPath := path.Join(setting.CustomPath, relPath)