fix download issue
This commit is contained in:
6
index.js
6
index.js
@@ -261,11 +261,11 @@ app.get('/jobs-status', async (req, res) => {
|
||||
}))));
|
||||
});
|
||||
|
||||
app.get('/download/:filename', async (req, res) => {
|
||||
app.get('/download', async (req, res) => {
|
||||
try {
|
||||
const { filename } = req.params;
|
||||
const { filename } = req.query;
|
||||
|
||||
if (filename.includes('..') || filename.includes('/') || filename.includes('\\')) {
|
||||
if (filename.includes('..') || filename.includes('\\')) {
|
||||
return res.status(400).json({ error: 'Invalid filename' });
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user