mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-18 20:49:28 +00:00
30 lines
923 B
JavaScript
30 lines
923 B
JavaScript
|
// Provenance: ChristoPy/serve-here.js (fixed).
|
||
|
|
// repo: ChristoPy/serve-here.js
|
||
|
|
// commit: cefb51d03290b6a88dd13143ab2de31b8cf57c39
|
||
|
|
// parent: ad077637bf7a9fe0dee3262f011aed19a45ce92c
|
||
|
|
// commit_url: https://github.com/ChristoPy/serve-here.js/commit/cefb51d03290b6a88dd13143ab2de31b8cf57c39
|
||
|
|
// cve: CVE-2019-5444
|
||
|
|
// license: MIT
|
||
|
|
// function: ConfigureFilePath
|
||
|
|
// relpath: source/response.js
|
||
|
|
// provenance: human
|
||
|
|
// mechanism: path_join_user_input
|
||
|
|
// upstream_start: 14
|
||
|
|
|
||
|
|
module.exports.ConfigureFilePath = (Options, FilePath) => {
|
||
|
|
|
||
|
|
const Slash = FilePath.split ("")[FilePath.split ("").length - 1] === "/";
|
||
|
|
|
||
|
|
if (FilePath === "/") {
|
||
|
|
return `${Options.RootFolder}/${Options.IndexFile}`;
|
||
|
|
} else {
|
||
|
|
const IsMalicious = HasMaliciousPath(Options, FilePath);
|
||
|
|
|
||
|
|
if (IsMalicious) {
|
||
|
|
return null;
|
||
|
|
} else {
|
||
|
|
return (Slash ? `${Options.RootFolder}${FilePath.slice (0, -1)}` : `${Options.RootFolder}${FilePath}`);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|