From: qydysky <qydysky@foxmail.com>
Date: Sun, 6 Oct 2024 20:17:56 +0000 (+0800)
Subject: 1
X-Git-Tag: v0.1.20241006201946
X-Git-Url: http://127.0.0.1:8081/?a=commitdiff_plain;h=c09e9ad32bcbc8c4661876478e068c4988d4bbf7;p=front%2F.git

1
---

diff --git a/local.go b/local.go
index cd4991f..2e35bc2 100644
--- a/local.go
+++ b/local.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"net/http"
+	"net/url"
 	"time"
 	_ "unsafe"
 
@@ -29,12 +30,17 @@ func (localDealer) Deal(ctx context.Context, w http.ResponseWriter, r *http.Requ
 		logFormat = "%v %v%v > %v local %v %v %v"
 	)
 
-	url := chosenBack.To
+	path := chosenBack.To
 	if chosenBack.PathAdd() {
-		url += r.RequestURI
+		if s, e := url.PathUnescape(r.URL.Path); e != nil {
+			logger.Warn(`W:`, fmt.Sprintf(logFormat, r.RemoteAddr, chosenBack.route.config.Addr, routePath, chosenBack.Name, "BLOCK", e, time.Since(opT)))
+			return ErrDealReqUri
+		} else {
+			path += s
+		}
 	}
 
-	if !pfile.New(url, 0, true).IsExist() {
+	if !pfile.New(path, 0, true).IsExist() {
 		return ErrReqDoFail
 	}
 
@@ -45,6 +51,6 @@ func (localDealer) Deal(ctx context.Context, w http.ResponseWriter, r *http.Requ
 
 	logger.Debug(`T:`, fmt.Sprintf(logFormat, r.RemoteAddr, chosenBack.route.config.Addr, routePath, chosenBack.Name, r.Method, r.RequestURI, time.Since(opT)))
 
-	http.ServeFile(w, r.WithContext(ctx), url)
+	http.ServeFile(w, r.WithContext(ctx), path)
 	return nil
 }