M_Kececi/bssapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: sanitize pdf font path

Browse Source
This commit is contained in:
MEHMETKECECI
2026-02-16 14:07:38 +03:00
parent a514f4dcfa
commit f6e1e7d00e
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
svc/routes/pdf_assets.go
View File

@@ -18,14 +18,17 @@ func resolvePdfAssetPath(name string) (string, error) {
return "", fmt.Errorf("env PDF_FONT_DIR not set") return "", fmt.Errorf("env PDF_FONT_DIR not set")
} }
// Mutlaka absolute olsun if !strings.HasPrefix(base, "/") {
if !filepath.IsAbs(base) { base = "/" + base
return "", fmt.Errorf("PDF_FONT_DIR must be absolute: %s", base)
} }
full := filepath.Clean(filepath.Join(base, name)) name = strings.TrimSpace(name)
name = strings.TrimPrefix(name, "/")
name = strings.TrimPrefix(name, "\\")
full := filepath.Join(base, name)
full = filepath.Clean(full)
// DEBUG
log.Printf("📄 PDF FONT PATH = %s", full) log.Printf("📄 PDF FONT PATH = %s", full)
if _, err := os.Stat(full); err != nil { if _, err := os.Stat(full); err != nil {