diff options
| author | sarahdenofiletrav <74922000+sarahdenofiletrav@users.noreply.github.com> | 2020-11-26 21:31:19 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-11-26 22:31:19 +0100 |
| commit | 28869a632d190dc29d78738bc5e90eadf99bc824 (patch) | |
| tree | 85b749f6ffbaeada706a6b6d15b0f4ce2399d454 /std/node | |
| parent | 4f46dc999b9fd3f26b6586d06d099d7039ca35c8 (diff) | |
fix(std/http): prevent path traversal (#8474)
Fix path traversal problem when the request URI
does not have a leading slash.
The file server now returns HTTP 400 when requests
lack the leading slash, and are not absolute URIs.
(https://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html).
Diffstat (limited to 'std/node')
0 files changed, 0 insertions, 0 deletions