github/bettercap
1
0
Fork 0
mirror of https://github.com/bettercap/bettercap synced 2025-07-12 08:07:00 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix: expanding file path in file read api

Browse source
This commit is contained in:
Simone Margaritelli 2024-08-22 10:28:28 +02:00
parent ac2d333609
commit 7d85483214
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/api_rest/api_rest_controller.go
View file

@ -12,6 +12,7 @@ import (
"strings" "strings"
"github.com/bettercap/bettercap/v2/session" "github.com/bettercap/bettercap/v2/session"
"github.com/evilsocket/islazy/fs"
"github.com/gorilla/mux" "github.com/gorilla/mux"
) )
@ -426,7 +427,14 @@ func (mod *RestAPI) fileRoute(w http.ResponseWriter, r *http.Request) {
return return
} }
var err error
fileName := r.URL.Query().Get("name") fileName := r.URL.Query().Get("name")
if fileName, err = fs.Expand(fileName); err != nil {
mod.Warning("can't expand %s: %v", fileName, err)
http.Error(w, "Bad Request", 400)
return
}
if fileName != "" && r.Method == "GET" { if fileName != "" && r.Method == "GET" {
mod.readFile(fileName, w, r) mod.readFile(fileName, w, r)