TyleoDvDelaware3217/Kuma
1
0
Fork 0
mirror of https://github.com/louislam/uptime-kuma.git synced 2025-05-29 01:42:34 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Sanitize all paths used inside writeDBConfig function

Browse source
This commit is contained in:
Gabriel Ngandu-Biseba 2025-03-31 12:36:19 +02:00
parent 050944f45e
commit 316262efe5
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
server/database.js
View file

@ -183,6 +183,7 @@ class Database {
}
/**
* @throws The CA file must be a pem file
* @typedef {string|undefined} envString
* @param {{type: "sqlite"} | {type:envString, hostname:envString, port:envString, database:envString, username:envString, password:envString, caFilePath:envString}} dbConfig the database configuration that should be written
* @returns {void}
@ -191,10 +192,10 @@ class Database {
// Move CA file to the data directory
if (dbConfig.caFilePath) {
const dataCaFilePath = path.resolve(Database.dataDir, "mariadb-ca.pem");
if (!dbConfig.caFilePath.endsWith(".pem")) {
if (!path.resolve(dbConfig.caFilePath).endsWith(".pem")) {
throw new Error("Invalid CA file, it must be a .pem file");
}
fs.renameSync(fs.realpathSync(dbConfig.caFilePath), dataCaFilePath);
fs.renameSync(fs.realpathSync(path.resolve(dbConfig.caFilePath)), path.resolve(dataCaFilePath));
dbConfig.caFilePath = dataCaFilePath;
dbConfig.ssl = undefined;
dbConfig.caFile = undefined;