TyleoDvDelaware3217/Kuma
1
0
Fork 0
mirror of https://github.com/louislam/uptime-kuma.git synced 2025-05-30 10:22:35 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Sanitize all paths used inside writeDBConfig function

Browse source
This commit is contained in:
Gabriel Ngandu-Biseba 2025-03-31 12:36:19 +02:00
parent 050944f45e
commit 316262efe5
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
server/database.js
View file

@ -183,6 +183,7 @@ class Database {
} }
/** /**
* @throws The CA file must be a pem file
* @typedef {string|undefined} envString * @typedef {string|undefined} envString
* @param {{type: "sqlite"} | {type:envString, hostname:envString, port:envString, database:envString, username:envString, password:envString, caFilePath:envString}} dbConfig the database configuration that should be written * @param {{type: "sqlite"} | {type:envString, hostname:envString, port:envString, database:envString, username:envString, password:envString, caFilePath:envString}} dbConfig the database configuration that should be written
* @returns {void} * @returns {void}
@ -191,10 +192,10 @@ class Database {
// Move CA file to the data directory // Move CA file to the data directory
if (dbConfig.caFilePath) { if (dbConfig.caFilePath) {
const dataCaFilePath = path.resolve(Database.dataDir, "mariadb-ca.pem"); const dataCaFilePath = path.resolve(Database.dataDir, "mariadb-ca.pem");
if (!dbConfig.caFilePath.endsWith(".pem")) { if (!path.resolve(dbConfig.caFilePath).endsWith(".pem")) {
throw new Error("Invalid CA file, it must be a .pem file"); throw new Error("Invalid CA file, it must be a .pem file");
} }
fs.renameSync(fs.realpathSync(dbConfig.caFilePath), dataCaFilePath); fs.renameSync(fs.realpathSync(path.resolve(dbConfig.caFilePath)), path.resolve(dataCaFilePath));
dbConfig.caFilePath = dataCaFilePath; dbConfig.caFilePath = dataCaFilePath;
dbConfig.ssl = undefined; dbConfig.ssl = undefined;
dbConfig.caFile = undefined; dbConfig.caFile = undefined;