lukechilds/node - node - Gitea: Git with a cup of tea

Author	SHA1	Message	Date
isaacs	65037eeb32	Don't let path.normalize get above the root. Any path.join or path.normalize that starts with a / will not go "above" that after normalization. This is important because /../foo is almost always some sort of error, and doesn't match the corollary in sh: `cd $p; pwd` At the worse, this can be a vector for exploits, since a static file server might do path.join(docroot, path.normalize("/"+req)) to get the file. If the normalized request path could be something like "/../../../etc/passwd" then bad things could happen.	15 years ago
isaacs	f0f247d7e5	Fix dirname so that dirname('/a/b/') -> '/a', like sh's does. Before there was this comment: Can't strip trailing slashes since module.js incorrectly thinks dirname('/a/b/') should yield '/a/b' instead of '/a'. But now, such thinking is corrected.	15 years ago
Ryan Dahl	9fd5e3c89c	Update tests to work with module contexts	15 years ago
Micheil Smith	b05daaaf69	Adding path.existsSync (with tests.)	15 years ago
Aapo Laitinen	c4876d01a1	Change the behavior of path.extname Make path.extname return an empty string also if: - The last dot is not in the last path component - The last dot starts the last path component	15 years ago
rentzsch	36a45c4e0d	FIX path.dirname('/tmp') => '/'. Previously path.dirname('/tmp') incorrectly returned '.'. Unfortunately module.js incorrectly thinks dirname('/a/b/') should yield '/a/b', so I can't strip trailing slashes yet. Once module.js is fixed, then the commented-out code should be activated and a test written for it.	15 years ago
isaacs	5861db8a69	Remove process.mixin dependency from all tests.	15 years ago
arlolra	04fac19822	Split tests.	15 years ago
isaacs	988174a629	Add tests for path module.	15 years ago