Mathis/lemma
1
0
Fork 0
mirror of https://github.com/lordmathis/lemma.git synced 2025-11-06 07:54:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update path validation error handling

Browse Source
This commit is contained in:
Matúš Námešný
2024-11-28 21:18:30 +01:00
parent fbb8fa3a60
commit 91489ca633
4 changed files with 70 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/internal/storage/workspace.go
View File

@@ -27,7 +27,7 @@ func (s *Service) ValidatePath(userID, workspaceID int, path string) (string, er
// First check if the path is absolute
if filepath.IsAbs(path) {
return "", fmt.Errorf("invalid path: absolute paths not allowed")
return "", &PathValidationError{Path: path, Message: "absolute paths not allowed"}
}
// Join and clean the path
@@ -36,7 +36,7 @@ func (s *Service) ValidatePath(userID, workspaceID int, path string) (string, er
// Verify the path is still within the workspace
if !strings.HasPrefix(cleanPath, workspacePath) {
return "", fmt.Errorf("invalid path: outside of workspace")
return "", &PathValidationError{Path: path, Message: "path traversal attempt"}
}
return cleanPath, nil