fix(console): fix path regexp cve, close koishijs/koishi#1457

koishijs · Sep 17, 2024 · 855422a · 855422a
1 parent 81e0573
commit 855422a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/plugins/console/src/node/index.ts b/plugins/console/src/node/index.ts
@@ -127,7 +127,7 @@ class NodeConsole extends Console {
   private serveAssets() {
     const { uiPath } = this.config
 
-    this.ctx.server.get(uiPath + '(/.+)*', async (ctx, next) => {
+    this.ctx.server.get(uiPath + '(.*)', async (ctx, next) => {
       await next()
       if (ctx.body || ctx.response.body) return
 
@@ -215,7 +215,7 @@ class NodeConsole extends Console {
       },
     })
 
-    this.ctx.server.all('/vite(/.+)*', (ctx) => new Promise((resolve) => {
+    this.ctx.server.all('/vite(.*)', (ctx) => new Promise((resolve) => {
       this.vite.middlewares(ctx.req, ctx.res, resolve)
     }))