mirrors/Tachidesk
1
0
Fork 0
mirror of https://github.com/Suwayomi/Tachidesk.git synced 2026-01-25 13:04:08 +01:00
Code Issues Projects Releases Wiki Activity

Prevent subpath injection with disabled setting (#1869)

Browse Source
This commit is contained in:
schroda
2026-01-23 17:30:29 +01:00
committed by GitHub
parent b4595b70d6
commit a58dcc6f19
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/src/main/kotlin/suwayomi/tachidesk/server/util/WebInterfaceManager.kt
View File

@@ -204,12 +204,12 @@ object WebInterfaceManager {
val tempWebUIRoot = createServableDirectory()
val orgIndexHtml = File("$tempWebUIRoot/index.html")
if (orgIndexHtml.exists()) {
if (ServerSubpath.isDefined() && orgIndexHtml.exists()) {
val originalIndexHtml = orgIndexHtml.readText()
val subpathInjectionScript =
"""
<script>
"// <<suwayomi-subpath-injection>>"
// <<suwayomi-subpath-injection>>
const baseTag = document.createElement('base');
baseTag.href = location.origin + "${ServerSubpath.asRootPath()}";
document.head.appendChild(baseTag);