site: support files in directories in /repl/local/

sveltejs · Jun 3, 2019 · 3dbf7d8 · 3dbf7d8
1 parent f7e6b32
commit 3dbf7d8
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/site/src/routes/repl/local/[file].js → site/src/routes/repl/local/[...file].js b/site/src/routes/repl/local/[file].js → site/src/routes/repl/local/[...file].js
@@ -1,12 +1,13 @@
 import { createReadStream } from 'fs';
 
 export function get(req, res) {
-	if (process.env.NODE_ENV !== 'development' || !/^[a-z.]+$/.test(req.params.file)) {
+	const path = req.params.file.join('/');
+	if (process.env.NODE_ENV !== 'development' || ('/' + path).includes('/.')) {
 		res.writeHead(403);
 		res.end();
 		return;
 	}
-	createReadStream('../' + req.params.file)
+	createReadStream('../' + path)
 		.on('error', () => {
 			res.writeHead(403);
 			res.end();