From 028fec957f4cf9fde66bd4ad792fbc7224f25a9f Mon Sep 17 00:00:00 2001 From: Lennart kats Date: Sat, 20 Jun 2015 18:54:31 +0000 Subject: [PATCH] Track from more places --- plugins/c9.vfs.server/vfs.server.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/plugins/c9.vfs.server/vfs.server.js b/plugins/c9.vfs.server/vfs.server.js index c924aac1..11f2287e 100644 --- a/plugins/c9.vfs.server/vfs.server.js +++ b/plugins/c9.vfs.server/vfs.server.js @@ -111,6 +111,8 @@ function plugin(options, imports, register) { var version = req.params.version; var user = req.user; + trackActivity(user, req.cookies); + if (version != kaefer.version.protocol) { var err = new error.PreconditionFailed("Wrong VFS protocol version. Expected version '" + kaefer.version.protocol + "' but found '" + version + "'"); err.subtype = "protocol_mismatch"; @@ -199,6 +201,8 @@ function plugin(options, imports, register) { var path = req.params.path; var user = req.user; + trackActivity(user, req.cookies); + if (path.indexOf("../") !== -1) return next(new error.BadRequest("invalid path"));