Nulo/gitea
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Activity

#3461 fix security issue of REAMDE path in create repository

Browse source
This commit is contained in:
Unknwon 2016-08-15 02:35:54 -07:00
parent 5e89485cec
commit cc647ba9d5
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
models/repo.go
View file

@ -870,7 +870,7 @@ type CreateRepoOptions struct {
} }
func getRepoInitFile(tp, name string) ([]byte, error) { func getRepoInitFile(tp, name string) ([]byte, error) {
relPath := path.Join("conf", tp, name) relPath := path.Join("conf", tp, strings.TrimLeft(name, "./"))
// Use custom file when available. // Use custom file when available.
customPath := path.Join(setting.CustomPath, relPath) customPath := path.Join(setting.CustomPath, relPath)