c9-core/plugins/c9.preview/lib/middleware/sanitize-path-param.js

16 wiersze
397 B
JavaScript

"use strict";
var Path = require("path");
module.exports = function sanitzePreviewPath(req, res, next) {
var normalized = Path.normalize(decodeURIComponent(req.params.path));
// N.B. Path.normalize does not strip away when the path starts with "../"
if (normalized)
normalized = normalized.replace(/[.]{2}\//g, "") || "/";
req.params.path = normalized;
next();
};