]> Cypherpunks repositories - gostls13.git/commit
net/http: make http.FileServer return 404 when a path is invalid/unsafe
authorGrégoire Lodi <pro@lodi.me>
Wed, 5 Mar 2025 09:44:46 +0000 (09:44 +0000)
committerGopher Robot <gobot@golang.org>
Wed, 5 Mar 2025 19:26:39 +0000 (11:26 -0800)
commit061efaa8a761458eaa41119ffd59033738cf141c
tree9b9d168aeba7ca7cc5fd596352dac45a6a4f425d
parent37026a7c563c580bef0fac1e5b60e9498650e3a2
net/http: make http.FileServer return 404 when a path is invalid/unsafe

This PR adds error handling in net/http toHTTPError to return a 404
instead of a 500 when net/http fs.Dir.Open throws the error http:
invalid or unsafe file path.

Fixes #72091

Change-Id: I7941c8fca5160a4a82732dc1d05b9b95eac84fbf
GitHub-Last-Rev: 04b5019dfb629820621f3776d6f22fd754171565
GitHub-Pull-Request: golang/go#72108
Reviewed-on: https://go-review.googlesource.com/c/go/+/654975
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Damien Neil <dneil@google.com>
src/net/http/fs.go
src/net/http/fs_test.go