fsylvain/RenewCMS
1
0
Fork 0
mirror of https://github.com/Floriansylvain/RenewCMS.git synced 2026-08-19 11:43:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: removed direct access to static folders

Browse Source
This commit is contained in:
Florian Sylvain
2024-06-13 14:25:38 +02:00
parent 26984980b7
commit f46737399f
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/page.go
+7
View File
@@ -4,6 +4,7 @@ import (
"github.com/go-chi/chi/v5" "github.com/go-chi/chi/v5"
"html/template" "html/template"
"net/http" "net/http"
"os"
"path/filepath" "path/filepath"
"strings" "strings"
) )
@@ -74,6 +75,12 @@ func GetLogout(w http.ResponseWriter, r *http.Request) {
func StaticFileServerWithContentType(fsys http.FileSystem) http.Handler { func StaticFileServerWithContentType(fsys http.FileSystem) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
path := r.URL.Path path := r.URL.Path
filePath := filepath.Join("api/static", r.URL.Path)
fileInfo, err := os.Stat(filePath)
if err == nil && fileInfo.IsDir() {
http.Error(w, "Folder direct access is disabled.", http.StatusForbidden)
return
}
if ext := filepath.Ext(path); ext != "" { if ext := filepath.Ext(path); ext != "" {
if ct, ok := contentTypes[ext]; ok { if ct, ok := contentTypes[ext]; ok {
w.Header().Set("Cache-Control", "public, max-age=31536000") w.Header().Set("Cache-Control", "public, max-age=31536000")