fix: check img path

kingwrcy · Dec 16, 2024 · e95bf52 · e95bf52
1 parent 3d16997
commit e95bf52
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/backend/handler/memo.go b/backend/handler/memo.go
@@ -63,7 +63,7 @@ func (m MemoHandler) RemoveImage(c echo.Context) error {
 		return FailResp(c, ParamError)
 	}
 
-	if !strings.HasPrefix(req.Img, "/upload/") {
+	if !strings.HasPrefix(req.Img, "/upload/") || strings.Contains(req.Img, "..") {
 		return SuccessResp(c, h{})
 	}