temple/Suwayomi-Server
1
0
Fork 0
mirror of https://github.com/Suwayomi/Suwayomi-Server.git synced 2026-06-30 17:34:39 -05:00
Code Issues Packages Projects Releases Wiki Activity

Prevent subpath injection with disabled setting (#1869)

Browse Source
This commit is contained in:
schroda
2026-01-23 17:30:29 +01:00
committed by GitHub
parent b4595b70d6
commit a58dcc6f19
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/src/main/kotlin/suwayomi/tachidesk/server/util/WebInterfaceManager.kt
View File

@@ -204,12 +204,12 @@ object WebInterfaceManager {
val tempWebUIRoot = createServableDirectory() val tempWebUIRoot = createServableDirectory()
val orgIndexHtml = File("$tempWebUIRoot/index.html") val orgIndexHtml = File("$tempWebUIRoot/index.html")
if (orgIndexHtml.exists()) { if (ServerSubpath.isDefined() && orgIndexHtml.exists()) {
val originalIndexHtml = orgIndexHtml.readText() val originalIndexHtml = orgIndexHtml.readText()
val subpathInjectionScript = val subpathInjectionScript =
""" """
<script> <script>
"// <<suwayomi-subpath-injection>>" // <<suwayomi-subpath-injection>>
const baseTag = document.createElement('base'); const baseTag = document.createElement('base');
baseTag.href = location.origin + "${ServerSubpath.asRootPath()}"; baseTag.href = location.origin + "${ServerSubpath.asRootPath()}";
document.head.appendChild(baseTag); document.head.appendChild(baseTag);