3 ms·
req.response.sendFile('webroot/' + file); !!!! I'll have file='../../secret.txt' thanks
by almost 14y ago
req.response.sendFile('webroot/' + file);
!!!!
I'll have file='../../secret.txt' thanks
- purplefox 14y agoYes, of course in a real web server you'd make sure you do the checks ;) The documentation actually mentions this point explicitly :)
- almost 14y agoI'm pretty sure I don't want to use a web server by people who think a 5 line demo that gives unrestricted access to the hosts file system is the best way to show off it's capabilities. Sorry, but that's just stupid.
- purplefox 14y agohttp://vertx.io/core_manual_js.html#serving-files-directly-disk http://vertx.io/core_manual_js.html#serving-files-directly-d...
- almost 14y agoI'm unsure what you're trying to say there. Yes, I am aware that it's possible to serve files without exposing your whole file system. Did you think that was something that might be in doubt?