mirror of
https://github.com/gogs/gogs.git
synced 2026-01-22 15:22:33 +01:00
59e9fa191b
Co-authored-by: deepsource-autofix[bot] <62050782+deepsource-autofix[bot]@users.noreply.github.com>
20 lines
575 B
Go
20 lines
575 B
Go
package tool
|
|
|
|
import (
|
|
"path/filepath"
|
|
"strings"
|
|
)
|
|
|
|
// IsSameSiteURLPath returns true if the URL path belongs to the same site, false otherwise.
|
|
// False: //url, http://url, /\url
|
|
// True: /url
|
|
func IsSameSiteURLPath(url string) bool {
|
|
return len(url) >= 2 && url[0] == '/' && url[1] != '/' && url[1] != '\\'
|
|
}
|
|
|
|
// IsMaliciousPath returns true if given path is an absolute path or contains malicious content
|
|
// which has potential to traverse upper level directories.
|
|
func IsMaliciousPath(path string) bool {
|
|
return filepath.IsAbs(path) || strings.Contains(path, "..")
|
|
}
|