Reject requests containing '..' in them

This commit is contained in:
adnano 2020-09-26 17:13:13 -04:00
parent ceb40a2fab
commit a1a2523c5c

View File

@ -264,6 +264,7 @@ type ServeDir struct {
} }
// FileServer takes a filesystem and returns a handler which uses that filesystem. // FileServer takes a filesystem and returns a handler which uses that filesystem.
// The returned Handler rejects requests containing '..' in them.
func FileServer(fsys FS) Handler { func FileServer(fsys FS) Handler {
return fsHandler{ return fsHandler{
fsys, fsys,