From ee23bb2c3e5aca4832a77466361b4d2056d83385 Mon Sep 17 00:00:00 2001 From: Simon Ding Date: Wed, 11 Jun 2025 15:00:31 +0800 Subject: [PATCH] fix: error mount --- pkg/storage/base.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pkg/storage/base.go b/pkg/storage/base.go index b7df858..1ecf79f 100644 --- a/pkg/storage/base.go +++ b/pkg/storage/base.go @@ -100,11 +100,16 @@ func (b *Base) Upload(destDir string, tryLink, detectMime, changeMediaHash bool, if err != nil { return err } + rel, err := filepath.Rel(b.src, path) if err != nil { return errors.Wrapf(err, "relation between %s and %s", b.src, path) } - destName := filepath.Join(targetBase, rel) + destName := filepath.Clean(filepath.Join(targetBase, rel)) + if !strings.HasPrefix(destName, targetBase) { + //如果目标路径不是在目标目录下，则报错 + return errors.Errorf("destination: %s is not in target dir: %s", destName, targetBase) + } if info.IsDir() { mkdir(destName)