blob: 8b252399dcda58543eaa4125573421cab6cdb3c9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
--- lib/node_modules/connect/lib/middleware/static.js.orig 2013-03-23 13:30:36.479309260 +0100
+++ lib/node_modules/connect/lib/middleware/static.js 2013-03-23 13:30:13.661917828 +0100
@@ -126,7 +126,7 @@
if (!root && ~path.indexOf('..')) return utils.forbidden(res);
// join / normalize from optional root dir
- path = normalize(join(root, path));
+ path = normalize(join(root || '', path));
// malicious path
if (root && 0 != path.indexOf(root)) return fn
|