Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-29 01:56:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

patching accidental leakage of full path of uploaded file when uploading pictures or attachments

Browse Source
This commit is contained in:
Julian Lam
2018-02-26 15:40:19 -05:00
parent bfa8178663
commit a8ec6a4a9c
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src/controllers/uploads.js
View File

@@ -73,7 +73,14 @@ function uploadAsImage(req, uploadedFile, callback) {
resizeImage(fileObj, next);
},
], callback);
], function (err, fileObj) {
if (err) {
return callback(err);
}
delete fileObj.path;
callback(null, fileObj);
});
}
function uploadAsFile(req, uploadedFile, callback) {
@@ -90,7 +97,14 @@ function uploadAsFile(req, uploadedFile, callback) {
}
uploadsController.uploadFile(req.uid, uploadedFile, next);
},
], callback);
], function (err, fileObj) {
if (err) {
return callback(err);
}
delete fileObj.path;
callback(null, fileObj);
});
}
function resizeImage(fileObj, callback) {