use util.CleanPath

fuxiaohei · fuxiaohei · commit 75af3b64c6e9 · 2023-03-11T23:01:34.000+08:00
diff --git a/modules/storage/local.go b/modules/storage/local.go
@@ -130,7 +130,7 @@ func (l *LocalStorage) URL(path, name string) (*url.URL, error) {
 func (l *LocalStorage) IterateObjects(prefix string, fn func(path string, obj Object) error) error {
 	dir := l.dir
 	if prefix != "" {
-		dir = filepath.Join(l.dir, prefix)
+		dir = util.CleanPath(filepath.Join(l.dir, prefix))
 		if !strings.HasPrefix(dir, strings.TrimSuffix(l.dir, "/")) {
 			return ErrIllegalPath
 		}

Original file line number	Diff line number	Diff line change
`@@ -130,7 +130,7 @@ func (l LocalStorage) URL(path, name string) (url.URL, error) {`
`130`	`130`	`func (l *LocalStorage) IterateObjects(prefix string, fn func(path string, obj Object) error) error {`
`131`	`131`	`dir := l.dir`
`132`	`132`	`if prefix != "" {`
`133`		`- dir = filepath.Join(l.dir, prefix)`
	`133`	`+ dir = util.CleanPath(filepath.Join(l.dir, prefix))`
`134`	`134`	`if !strings.HasPrefix(dir, strings.TrimSuffix(l.dir, "/")) {`
`135`	`135`	`return ErrIllegalPath`
`136`	`136`	`}`