Escape paths for find file correctly (#30026)

Fix #30020
go-gitea · Mar 23, 2024 · 1cdc6c3 · 1cdc6c3
1 parent 74c1378
commit 1cdc6c3
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/routers/web/repo/find.go b/routers/web/repo/find.go
@@ -7,6 +7,7 @@ import (
  "net/http"
 
  "code.gitea.io/gitea/modules/base"
+ "code.gitea.io/gitea/modules/util"
  "code.gitea.io/gitea/services/context"
 )
 
@@ -17,7 +18,7 @@ const (
 // FindFiles render the page to find repository files
 func FindFiles(ctx *context.Context) {
  path := ctx.Params("*")
- ctx.Data["TreeLink"] = ctx.Repo.RepoLink + "/src/" + path
- ctx.Data["DataLink"] = ctx.Repo.RepoLink + "/tree-list/" + path
+ ctx.Data["TreeLink"] = ctx.Repo.RepoLink + "/src/" + util.PathEscapeSegments(path)
+ ctx.Data["DataLink"] = ctx.Repo.RepoLink + "/tree-list/" + util.PathEscapeSegments(path)
  ctx.HTML(http.StatusOK, tplFindFiles)
 }