fix: forbidden filtering

This commit is contained in:
Jonathan Kelley 2022-02-27 14:26:37 -05:00
parent 94fedcbc91
commit bfc55b0646

View file

@ -26,12 +26,6 @@ pub(super) fn desktop_handler(request: &Request, asset_root: Option<PathBuf>) ->
let asset = asset_root.join(trimmed).canonicalize()?;
if !asset.starts_with(asset_root) {
return ResponseBuilder::new()
.status(StatusCode::FORBIDDEN)
.body(String::from("Forbidden").into_bytes());
}
if !asset.exists() {
return ResponseBuilder::new()
.status(StatusCode::NOT_FOUND)