don't use user input for repository path access
1 file changed, 0 insertions(+), 7 deletions(-)
changed files
M routes/handler.go → routes/handler.go
@@ -126,15 +126,8 @@ log.Printf("access not allowed: %s", repoName) return ErrNotFound } - path, err := d.GetCleanPath(repoName) - if err != nil { - log.Printf("getcleanpath error: %v", err) - - return ErrNotFound - } rc.SetUserValue("repoName", repoName) - rc.SetUserValue("repoPath", path) return rc.Next() })