lukechilds/node - node - Gitea: Git with a cup of tea

Author	SHA1	Message	Date
isaacs	65037eeb32	Don't let path.normalize get above the root. Any path.join or path.normalize that starts with a / will not go "above" that after normalization. This is important because /../foo is almost always some sort of error, and doesn't match the corollary in sh: `cd $p; pwd` At the worse, this can be a vector for exploits, since a static file server might do path.join(docroot, path.normalize("/"+req)) to get the file. If the normalized request path could be something like "/../../../etc/passwd" then bad things could happen.	14 years ago
isaacs	f0f247d7e5	Fix dirname so that dirname('/a/b/') -> '/a', like sh's does. Before there was this comment: Can't strip trailing slashes since module.js incorrectly thinks dirname('/a/b/') should yield '/a/b' instead of '/a'. But now, such thinking is corrected.	14 years ago
Micheil Smith	b05daaaf69	Adding path.existsSync (with tests.)	15 years ago
Aapo Laitinen	c4876d01a1	Change the behavior of path.extname Make path.extname return an empty string also if: - The last dot is not in the last path component - The last dot starts the last path component	15 years ago
rentzsch	36a45c4e0d	FIX path.dirname('/tmp') => '/'. Previously path.dirname('/tmp') incorrectly returned '.'. Unfortunately module.js incorrectly thinks dirname('/a/b/') should yield '/a/b', so I can't strip trailing slashes yet. Once module.js is fixed, then the commented-out code should be activated and a test written for it.	15 years ago
isaacs	e0061a511d	refactor path module to lib/path.js	15 years ago