opensource/filestash
1
0
Fork 0
mirror of https://github.com/mickael-kerjean/filestash.git synced 2025-11-02 11:57:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

improvement (security): only allow preconfigured methods on preconfigured servers

Browse Source
This commit is contained in:
Mickael KERJEAN
2018-09-27 16:09:41 +10:00
parent d0b44bb388
commit c649dc4854
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
server/model/files.go
View File

@ -7,6 +7,23 @@ import (
) )
func NewBackend(ctx *App, conn map[string]string) (IBackend, error) { func NewBackend(ctx *App, conn map[string]string) (IBackend, error) {
isAllowed := false
for i := range ctx.Config.Connections {
if ctx.Config.Connections[i].Type == conn["type"] {
if ctx.Config.Connections[i].Hostname == nil {
isAllowed = true
break;
}else if *ctx.Config.Connections[i].Hostname == conn["hostname"] {
isAllowed = true
break;
}
}
}
if isAllowed == false {
return backend.NewNothing(conn, ctx)
}
switch conn["type"] { switch conn["type"] {
case "webdav": case "webdav":
return backend.NewWebDav(conn, ctx) return backend.NewWebDav(conn, ctx)