Docker/planka
Docker/planka
1
0
Fork 0
mirror of https://github.com/plankanban/planka.git synced 2025-07-22 22:59:44 +02:00
Code Issues Releases Activity

fix: Fix path traversal vulnerability

Browse source
This commit is contained in:
Maksim Eltyshev 2022-08-04 00:37:30 +02:00
parent fbe24c0fc0
commit ac1df5201d
2 changed files with 3 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
server/config/routes.js
View file

@ -80,7 +80,7 @@ module.exports.routes = {
skipAssets: false,
},
'GET /attachments/:id/download/thumbnails/:filename': {
'GET /attachments/:id/download/thumbnails/cover-256.jpg': {
action: 'attachments/download-thumbnail',
skipAssets: false,
},