fix a bug and update test

nunnly · Mar 21, 2018 · 01f13f0 · 01f13f0
1 parent 3fcc677
commit 01f13f0
Show file tree

Hide file tree

Showing 4 changed files with 52 additions and 44 deletions.
diff --git a/lib/index.js b/lib/index.js
@@ -7,7 +7,14 @@ var utils = require('./utils');
 
 function HttpServer(option) {
     var server = http.createServer(function (req, res) {
-        var targetPath = path.join(rootPath, req.url);
+        var requestPath = path.join(rootPath, req.url);
+        var targetPath;
+        if(!utils.allowPath(requestPath, rootPath)){
+            targetPath = rootPath;
+            req.url = '/';
+        }else {
+            targetPath = requestPath;
+        }
         if (fs.existsSync(targetPath)) {
             var targetType = fs.lstatSync(targetPath);
             if (targetType.isFile()) {

diff --git a/lib/utils.js b/lib/utils.js
@@ -79,4 +79,8 @@ exports.assign = function (target) {
     } else {
         assignObject.apply(null, arguments)
     }
+}
+
+exports.allowPath = function(requestPath, enablePath){
+    return requestPath.indexOf(enablePath) === 0;
 }
diff --git a/package-lock.json b/package-lock.json
diff --git a/test/test.js b/test/test.js
@@ -71,7 +71,15 @@ describe('m-server', function() {
       var ret = utils.sort('3','3');
       done();
       assert(ret === 0)
-    })
+    });
+    it('allow enable path', function(done){
+      assert(utils.allowPath('/test/b/a/c', '/test/b') === true);
+      done();
+    });
+    it('allow disable path', function(done){
+      assert(utils.allowPath('/c/c', '/test/b') === false);
+      done();
+    });
 
   });
 });