Mirrors/filebrowser
1
0
Fork 0
mirror of https://github.com/filebrowser/filebrowser.git synced 2026-07-17 16:36:49 +00:00
Code Issues Projects Releases Wiki Activity

fix: recursive check

Browse source
This commit is contained in:
Henrique Dias 2026-06-07 17:12:31 +02:00
parent 67ed670d92
commit 3406d3d7f9
No known key found for this signature in database
6 changed files with 94 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

4
files/file.go
View file

@ -475,10 +475,6 @@ func (i *FileInfo) readListing(checker rules.Checker, readHeader bool, calcImgRe
isSymlink, isInvalidLink := false, false
if IsSymlink(f.Mode()) {
isSymlink = true
// A symlink whose on-disk target escapes the scoped root must not be
// followed, otherwise the listing would leak the target's metadata
// (and downstream access) for files outside the user's scope or the
// shared subtree.
if ok, scopeErr := WithinScope(i.Fs, fPath); scopeErr != nil || !ok {
continue
}