fix download issue
This commit is contained in:
6
index.js
6
index.js
@@ -261,11 +261,11 @@ app.get('/jobs-status', async (req, res) => {
|
|||||||
}))));
|
}))));
|
||||||
});
|
});
|
||||||
|
|
||||||
app.get('/download/:filename', async (req, res) => {
|
app.get('/download', async (req, res) => {
|
||||||
try {
|
try {
|
||||||
const { filename } = req.params;
|
const { filename } = req.query;
|
||||||
|
|
||||||
if (filename.includes('..') || filename.includes('/') || filename.includes('\\')) {
|
if (filename.includes('..') || filename.includes('\\')) {
|
||||||
return res.status(400).json({ error: 'Invalid filename' });
|
return res.status(400).json({ error: 'Invalid filename' });
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user