yaha/memos
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

chore: restrict the html file (#749)

Browse Source 
* restrict the html file

* replace spaces with table

* remove space
This commit is contained in:
lujiefsi 2022-12-19 18:26:50 +08:00 committed by GitHub
parent bd6ab71d41
commit 726285e634
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
server/resource.go
View File

@ -7,6 +7,7 @@ import (
"net/http" "net/http"
"net/url" "net/url"
"strconv" "strconv"
"strings"
"time" "time"
"github.com/usememos/memos/api" "github.com/usememos/memos/api"
@ -42,6 +43,10 @@ func (s *Server) registerResourceRoutes(g *echo.Group) {
} }
filename := file.Filename filename := file.Filename
if strings.HasSuffix(filename, ".html") {
return echo.NewHTTPError(http.StatusBadRequest, "html file is not allowed")
}
filetype := file.Header.Get("Content-Type") filetype := file.Header.Get("Content-Type")
size := file.Size size := file.Size
src, err := file.Open() src, err := file.Open()