Skip to content

Commit

Permalink
dont allow directory traversal ether#2
Browse files Browse the repository at this point in the history
  • Loading branch information
0x46616c6b authored and webzwo0i committed Apr 18, 2015
1 parent 60d31e3 commit 27b0737
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion src/node/utils/Minify.js
Original file line number Diff line number Diff line change
Expand Up @@ -165,7 +165,6 @@ function minify(req, res, next)
var plugin = plugins.plugins[library];
var pluginPath = plugin.package.realPath;
filename = path.relative(ROOT_DIR, pluginPath + libraryPath);
filename = filename.replace(/\\/g, '/'); // Windows (safe generally?)
} else if (LIBRARY_WHITELIST.indexOf(library) != -1) {
// Go straight into node_modules
// Avoid `require.resolve()`, since 'mustache' and 'mustache/index.js'
Expand Down

0 comments on commit 27b0737

Please sign in to comment.