Skip to content

Commit fc224b5

Browse files
committed
Fix: [SECURITY] /api/images is publically accessible by default & Image upload validation is insufficient. #819
1 parent a319fbe commit fc224b5

6 files changed

Lines changed: 6 additions & 6 deletions

File tree

packages/evershop/src/modules/cms/api/fileUpload/[context]multerFile[auth].js renamed to packages/evershop/src/modules/cms/api/fileUpload/[auth,validatePath]multerFile.js

File renamed without changes.

packages/evershop/src/modules/cms/api/fileUpload/[context]validatePath[multerFile].js renamed to packages/evershop/src/modules/cms/api/fileUpload/validatePath.js

File renamed without changes.
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
import multerFileMiddleware from '../fileUpload/[auth,validatePath]multerFile.js';
2+
3+
export default multerFileMiddleware;

packages/evershop/src/modules/cms/api/imageUpload/[context]multerFile[auth].js

Lines changed: 0 additions & 3 deletions
This file was deleted.

packages/evershop/src/modules/cms/api/imageUpload/[context]validatePath[multerFile].js

Lines changed: 0 additions & 3 deletions
This file was deleted.
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
import validatePathMiddelware from '../fileUpload/validatePath.js';
2+
3+
export default validatePathMiddelware;

0 commit comments

Comments
 (0)