blackteay/gin
3
0
Fork 0
mirror of https://github.com/gin-gonic/gin.git synced 2026-09-04 14:49:27 +08:00
Code Issues Projects Releases Wiki Activity

fix: resolve pr comments

Browse Source 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Mohamad Nimer 2026-07-03 02:54:21 +03:00
parent bb6335b24a
commit d7de89f01f
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
path.go
View File

@ -25,9 +25,12 @@ func cleanPath(p string) string {
if p == "" {
return "/"
}
// Prevent scheme-relative or backslash-based absolute redirects.
if len(p) > 1 && p[0] == '/' && (p[1] == '/' || p[1] == '\\') {
return "/"
// Prevent scheme-relative ("//...") or backslash-based absolute ("/\\...") paths.
for len(p) > 1 && p[0] == '/' && p[1] == '/' {
p = p[1:]
}
if len(p) > 1 && p[0] == '/' && p[1] == '\\' {
p = "/" + p[2:]
}
// Reasonably sized buffer on stack to avoid allocations in the common case.