#3461 fix security issue of REAMDE path in create repository

8 years ago · cc647ba9d5
1 changed files with 1 additions and 1 deletions
--- a/models/repo.go
+++ b/models/repo.go
@ -870,7 +870,7 @@ type CreateRepoOptions struct {
 }

 func getRepoInitFile(tp, name string) ([]byte, error) {
-	relPath := path.Join("conf", tp, name)
+	relPath := path.Join("conf", tp, strings.TrimLeft(name, "./"))

 	// Use custom file when available.
 	customPath := path.Join(setting.CustomPath, relPath)