From e76e8b38df224782085563bfee5ac081a40e331c Mon Sep 17 00:00:00 2001 From: imhao183 Date: Sat, 23 Jan 2021 15:58:53 +0800 Subject: [PATCH] =?UTF-8?q?=E8=A7=A3=E5=86=B3=E7=89=B9=E6=AE=8A=E6=96=87?= =?UTF-8?q?=E4=BB=B6=E4=B8=8B=E6=8A=A5=E5=BC=82=E5=B8=B8=E7=9A=84=E9=97=AE?= =?UTF-8?q?=E9=A2=98?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../src/main/java/com/xiaoleilu/loServer/action/FileAction.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/broker/src/main/java/com/xiaoleilu/loServer/action/FileAction.java b/broker/src/main/java/com/xiaoleilu/loServer/action/FileAction.java index 25ca9397..94940089 100755 --- a/broker/src/main/java/com/xiaoleilu/loServer/action/FileAction.java +++ b/broker/src/main/java/com/xiaoleilu/loServer/action/FileAction.java @@ -110,7 +110,7 @@ public class FileAction extends Action { // 路径安全检查 String path = httpPath.substring(0, httpPath.lastIndexOf("/")); - if (path.contains("/.") || path.contains("./") || path.charAt(0) == '.' || path.charAt(path.length() - 1) == '.' || ReUtil.isMatch(INSECURE_URI, path)) { + if (path.contains("/.") || path.contains("./") || ReUtil.isMatch(INSECURE_URI, path)) { return null; }