lukechilds/node - node - Gitea: Git with a cup of tea

History

isaacs 65037eeb32 Don't let path.normalize get above the root. Any path.join or path.normalize that starts with a / will not go "above" that after normalization. This is important because /../foo is almost always some sort of error, and doesn't match the corollary in sh: `cd $p; pwd` At the worse, this can be a vector for exploits, since a static file server might do path.join(docroot, path.normalize("/"+req)) to get the file. If the normalized request path could be something like "/../../../etc/passwd" then bad things could happen.		15 years ago
..
assert.js	Add assert.ifError	15 years ago
buffer.js	Added ability to pass offset to buffer write and toString methods as a string, i.e. '2' and encoding as anything	15 years ago
child_process.js	Specify env differently in execFile	15 years ago
crypto.js	fix whitespace errors	15 years ago
dgram.js	Datagram socket refactor. Add tests and documentation.	15 years ago
dns.js	Datagram socket refactor. Add tests and documentation.	15 years ago
events.js	More instanceof Array fixes	15 years ago
file.js	File API tweaks	15 years ago
freelist.js	Moving the http.js, net.js FreeList to being standalone.	15 years ago
fs.js	Support for reading byte ranges from files using fs.createReadStream.	15 years ago
http.js	instanceof Buffer to Buffer.isBuffer()	15 years ago
module.js	remove node::CheckBreak in favor of using the v8 debugger js object	15 years ago
net.js	Check for socket on Unix domain connect.	15 years ago
path.js	Don't let path.normalize get above the root.	15 years ago
posix.js	Rename 'posix' module to 'fs'	15 years ago
querystring.js	querystring: Removing typecasting of numeric strings to numbers	15 years ago
readline.js	Support for HOME and END in REPL.	15 years ago
repl.js	fix whitespace errors	15 years ago
string_decoder.js	fix whitespace errors	15 years ago
sys.js	Adds "pause" and "resume" events to pump and it's readable argument.	15 years ago
tcp.js	old tcp module is now tcp_old	15 years ago
url.js	Replace slow and broken for..in loops with faster for loops over the keys.	15 years ago
utils.js	utils.js links to sys.js instead of other way around	15 years ago