fix Uncontrolled data used in path expression

SAP · Mar 22, 2024 · 618c0fd · 618c0fd
1 parent abaf6af
commit 618c0fd
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/configmanager/server.js b/configmanager/server.js
@@ -14,8 +14,11 @@ app.get('/:namespace/:application', (req, res) => {
   res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
   res.setHeader("Content-Security-Policy", "script-src 'self'");
   const { namespace, application } = req.params;
-  const filePath = fs.realpathSync(path.normalize(`${__dirname}/data/cad-${namespace}-${application}.json`).replace(/^(\.\.(\/|\\|$))+/, ''));
+  const filePath = path.normalize(`${__dirname}/data/cad-${namespace}-${application}.json`).replace(/^(\.\.(\/|\\|$))+/, '');
   const defaultFilePath = `/data/cad-default.json`;
+  if(!filePath.startsWith(__dirname)){
+    return res.end()
+  }
 
   // Check if the file exists
   fs.access(filePath, fs.constants.F_OK, (err) => {