Use secure path.join

This commit is contained in:
Wildan M 2021-08-22 08:30:48 +07:00
commit ed3caed0eb

View file

@ -7,6 +7,7 @@ const record_prefix = 'forward-domain=';
const { const {
default: axios default: axios
} = require('axios'); } = require('axios');
const path = require('path');
/** /**
* @type {Object<string, {expire: number, expand: boolean, url: string}>} * @type {Object<string, {expire: number, expand: boolean, url: string}>}
@ -46,7 +47,7 @@ const server = http.createServer(async function (req, res) {
resolveCache[req.headers.host] = cache; resolveCache[req.headers.host] = cache;
} }
res.writeHead(301, { res.writeHead(301, {
'Location': cache.expand ? cache.url + req.url : cache.url, 'Location': cache.expand ? path.join(cache.url, req.url) : cache.url,
}); });
return; return;
} catch (error) { } catch (error) {