mirror of
https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web.git
synced 2025-09-17 16:56:37 +08:00
d09801bcab
- Sanitize path components to prevent directory traversal attacks - Filter out '.', '..', and empty path components - URL encode path components to prevent injection attacks - Prevents potential SSRF attacks via path manipulation This vulnerability could allow attackers to: - Access unintended resources outside the WebDAV scope - Potentially reach internal services or metadata endpoints - Bypass access controls through path manipulation Security impact: HIGH - Path traversal is a critical security issue |
||
|---|---|---|
| .. | ||
| [provider]/[...path] | ||
| artifacts | ||
| config | ||
| tencent | ||
| upstash/[action]/[...key] | ||
| webdav/[...path] | ||
| 302ai.ts | ||
| alibaba.ts | ||
| anthropic.ts | ||
| auth.ts | ||
| azure.ts | ||
| baidu.ts | ||
| bytedance.ts | ||
| common.ts | ||
| deepseek.ts | ||
| glm.ts | ||
| google.ts | ||
| iflytek.ts | ||
| moonshot.ts | ||
| openai.ts | ||
| proxy.ts | ||
| siliconflow.ts | ||
| stability.ts | ||
| xai.ts | ||