fix: prevent upload bypass via uppercase path
This commit is contained in:
parent
cab16ee844
commit
7b14b39de0
@ -32,7 +32,7 @@ module.exports = {
|
||||
token = req.cookies['jwt']
|
||||
}
|
||||
// Force uploads to use Auth headers
|
||||
if (req.path === '/u') {
|
||||
if (req.path.toLowerCase() === '/u') {
|
||||
return null
|
||||
}
|
||||
return token
|
||||
|
Loading…
Reference in New Issue
Block a user