andyburke/serverus
Template
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: ensure we aren't allowing methods other than GET for static files

Browse source
This commit is contained in:
Andy Burke 2025-07-31 14:53:53 -07:00
parent a9b20fea40
commit 582636ab5a
4 changed files with 50 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
handlers/static.ts
View file

@ -13,6 +13,11 @@ import * as media_types from '@std/media-types';
* @returns Either a response (a static file was requested and returned properly) or undefined if unhandled.
*/
export default async function handle_static_files(request: Request): Promise<Response | undefined> {
// we only handle GET on static files
if (request.method.toUpperCase() !== 'GET') {
return;
}
const url = new URL(request.url);
const normalized_path = path.resolve(path.normalize(url.pathname).replace(/^\/+/, ''));
if (!normalized_path.startsWith(Deno.cwd())) {