diff --git a/my-portfolio/server/storage-service/index.js b/my-portfolio/server/storage-service/index.js index bc36b50..80081f6 100644 --- a/my-portfolio/server/storage-service/index.js +++ b/my-portfolio/server/storage-service/index.js @@ -374,7 +374,8 @@ app.get('/content/:filename', (req, res) => { let filePath; const subPath = req.query.path || ''; try { - filePath = path.join(safeResolve(subPath), req.params.filename); + const rawPath = path.join(subPath, req.params.filename); + filePath = safeResolve(rawPath); } catch (e) { return res.status(400).send(e.message); }