Backup_Repos/filestash
1
0
Fork 0
mirror of https://github.com/mickael-kerjean/filestash synced 2025-12-24 09:13:11 +01:00
Code Issues Projects Releases Wiki Activity

improvement (security): only allow preconfigured methods on preconfigured servers

Browse source
This commit is contained in:
Mickael KERJEAN 2018-09-27 16:09:41 +10:00
parent d0b44bb388
commit c649dc4854
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
server/model/files.go
View file

@ -7,6 +7,23 @@ import (
)
func NewBackend(ctx *App, conn map[string]string) (IBackend, error) {
isAllowed := false
for i := range ctx.Config.Connections {
if ctx.Config.Connections[i].Type == conn["type"] {
if ctx.Config.Connections[i].Hostname == nil {
isAllowed = true
break;
}else if *ctx.Config.Connections[i].Hostname == conn["hostname"] {
isAllowed = true
break;
}
}
}
if isAllowed == false {
return backend.NewNothing(conn, ctx)
}
switch conn["type"] {
case "webdav":
return backend.NewWebDav(conn, ctx)