steve
/
factor
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't allow access through symlinks leading out of the ftp.server serving directory

db4
Doug Coleman 2010-02-03 15:26:37 -06:00
parent a3f1f9d1af
commit b0840bc355
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
basis/ftp/server/server.factor
View File

@ -58,7 +58,7 @@ C: <ftp-disconnect> ftp-disconnect
send-response ;
: serving? ( path -- ? )
normalize-path server get serving-directory>> head? ;
resolve-symlinks server get serving-directory>> head? ;
: can-serve-directory? ( path -- ? )
{ [ exists? ] [ file-info directory? ] [ serving? ] } 1&& ;
@ -343,7 +343,7 @@ M: ftp-server handle-client* ( server -- )
: <ftp-server> ( directory port -- server )
latin1 ftp-server new-threaded-server
swap >>insecure
swap normalize-path >>serving-directory
swap resolve-symlinks >>serving-directory
"ftp.server" >>name
5 minutes >>timeout ;