Track from more places

pull/117/merge
Lennart kats 2015-06-20 18:54:31 +00:00
rodzic 7545b361f0
commit 028fec957f
1 zmienionych plików z 4 dodań i 0 usunięć

Wyświetl plik

@ -111,6 +111,8 @@ function plugin(options, imports, register) {
var version = req.params.version;
var user = req.user;
trackActivity(user, req.cookies);
if (version != kaefer.version.protocol) {
var err = new error.PreconditionFailed("Wrong VFS protocol version. Expected version '" + kaefer.version.protocol + "' but found '" + version + "'");
err.subtype = "protocol_mismatch";
@ -199,6 +201,8 @@ function plugin(options, imports, register) {
var path = req.params.path;
var user = req.user;
trackActivity(user, req.cookies);
if (path.indexOf("../") !== -1)
return next(new error.BadRequest("invalid path"));