fix(dbfs): enforce root protection for single file share

2025-04-21 19:43:09 +08:00
parent d60e400f83
commit 7b5e0e8581
11 changed files with 32 additions and 17 deletions
--- a/pkg/filemanager/manager/viewer.go
+++ b/pkg/filemanager/manager/viewer.go
@@ -45,7 +45,7 @@ func init() {
 }

 func (m *manager) CreateViewerSession(ctx context.Context, uri *fs.URI, version string, viewer *setting.Viewer) (*ViewerSession, error) {
-	file, err := m.fs.Get(ctx, uri, dbfs.WithFileEntities())
+	file, err := m.fs.Get(ctx, uri, dbfs.WithFileEntities(), dbfs.WithNotRoot())
 	if err != nil {
 		return nil, err
 	}