opencode/yao
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor request guard to include page backend script execution

Browse source
This commit is contained in:
Max 2024-09-24 08:00:05 +08:00
parent 67ad169bf5
commit ddb337847e
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sui/api/request.go
View file

@ -311,6 +311,9 @@ func (r *Request) Guard(c *core.Cache) (int, error) {
if c.GuardRedirect != "" { if c.GuardRedirect != "" {
redirect := c.GuardRedirect redirect := c.GuardRedirect
data := core.Data{} data := core.Data{}
// Here may have a security issue, should be refector, in the future.
// Copy the script pointer to the request For page backend script execution
r.Request.Script = c.Script
if c.Data != "" { if c.Data != "" {
data, err = r.Request.ExecString(c.Data) data, err = r.Request.ExecString(c.Data)
if err != nil { if err != nil {