chore: decode filePath in header

AlistGo · Aug 28, 2022 · e5480b9 · e5480b9
1 parent e72a557
commit e5480b9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/server/handles/fsmanage.go b/server/handles/fsmanage.go
@@ -2,6 +2,7 @@ package handles
 
 import (
 	"fmt"
+	"net/url"
 	stdpath "path"
 	"strconv"
 	"time"
@@ -189,6 +190,11 @@ func FsRemove(c *gin.Context) {
 
 func FsPut(c *gin.Context) {
 	path := c.GetHeader("File-Path")
+	path, err := url.PathUnescape(path)
+	if err != nil {
+		common.ErrorResp(c, err, 400)
+		return
+	}
 	asTask := c.GetHeader("As-Task") == "true"
 	user := c.MustGet("user").(*model.User)
 	path = stdpath.Join(user.BasePath, path)