CalvinBackup/tauri
1
0
Fork 0
mirror of https://github.com/tauri-apps/tauri.git synced 2026-04-01 10:01:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: scope check when using the HTTP API to upload files closes #4312

Browse Source
This commit is contained in:
Lucas Nogueira
2022-06-10 15:54:26 -03:00
parent c2b7c77517
commit 8ce5b76264
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.changes/fix-http-multipart-file-validation.md Normal file
View File

@@ -0,0 +1,5 @@
---
"tauri": patch
---
Fixes filesystem scope check when using the HTTP API to upload files.

2
core/tauri/src/endpoints/http.rs
View File

@@ -103,7 +103,7 @@ impl Cmd {
} = value
{
if crate::api::file::SafePathBuf::new(path.clone()).is_err()
|| scopes.fs.is_allowed(&path)
|| !scopes.fs.is_allowed(&path)
{
return Err(crate::Error::PathNotAllowed(path.clone()).into_anyhow());
}