tools-mirrors/AndroidLibXrayLite
1
0
Fork 0
mirror of https://github.com/2dust/AndroidLibXrayLite.git synced 2025-06-28 22:29:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix asset bug (#150)

Browse source
This commit is contained in:
patterniha 2025-05-03 04:10:25 +03:30 • committed by GitHub
parent bafb45ffcf
commit 443ae5f577
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

22
libv2ray_main.go
View file

@ -78,25 +78,11 @@ func InitCoreEnv(envPath string, key string) {
// Custom file reader with path validation
corefilesystem.NewFileReader = func(path string) (io.ReadCloser, error) {
// G304 Fix - Path sanitization
baseDir := envPath
cleanPath := filepath.Clean(path)
fullPath := filepath.Join(baseDir, cleanPath)
// Prevent directory traversal
if baseDir != "" && !strings.HasPrefix(fullPath, baseDir) {
return nil, fmt.Errorf("unauthorized path: %s", path)
if _, err := os.Stat(path); os.IsNotExist(err) {
_, file := filepath.Split(path)
return mobasset.Open(file)
}
// Check file existence
if _, err := os.Stat(fullPath); os.IsNotExist(err) {
_, file := filepath.Split(fullPath)
return mobasset.Open(file) // Fallback to assets
} else if err != nil {
return nil, fmt.Errorf("file access error: %w", err)
}
return os.Open(fullPath) // #nosec G304 - Validated path
return os.Open(path)
}
}