shll.dev/miniws
2
2
Fork 0
mirror of https://github.com/shlldev/miniws.git synced 2025-09-02 19:00:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

added www directory permission checks to ensure it is readable by the executable

Browse Source
This commit is contained in:
uan
2025-08-11 14:28:16 +02:00
parent 4ab2004a6e
commit f80c506a95
3 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
go.mod
View File

@@ -4,4 +4,8 @@ go 1.24.5
require github.com/akamensky/argparse v1.4.0 require github.com/akamensky/argparse v1.4.0
require github.com/google/uuid v1.6.0 // indirect require (
github.com/google/uuid v1.6.0 // indirect
github.com/wneessen/go-fileperm v0.2.1 // indirect
golang.org/x/sys v0.35.0 // indirect
)

4
go.sum
View File

@@ -2,3 +2,7 @@ github.com/akamensky/argparse v1.4.0 h1:YGzvsTqCvbEZhL8zZu2AiA5nq805NZh75JNj4ajn
github.com/akamensky/argparse v1.4.0/go.mod h1:S5kwC7IuDcEr5VeXtGPRVZ5o/FdhcMlQz4IZQuw64xA= github.com/akamensky/argparse v1.4.0/go.mod h1:S5kwC7IuDcEr5VeXtGPRVZ5o/FdhcMlQz4IZQuw64xA=
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
github.com/wneessen/go-fileperm v0.2.1 h1:VNZT41b8HJDY5zUw4TbwPtfU1DuxZ3lcGH4dXlaZKis=
github.com/wneessen/go-fileperm v0.2.1/go.mod h1:Isv0pfQJstXAlmGGJjLGqCK0Z6d1ehbbrsO2xmTRsKs=
golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=

13
miniws/webserver.go
View File

@@ -11,6 +11,8 @@ import (
"strconv" "strconv"
"strings" "strings"
"time" "time"
"github.com/wneessen/go-fileperm"
) )
const ( const (
@@ -47,9 +49,18 @@ func NewWebServer(port_ int, logFolder_, configFolder_, wwwFolder_ string, maxLo
func (ws *WebServer) Run() { func (ws *WebServer) Run() {
_, err := os.Stat(ws.wwwFolder) _, err := os.Lstat(ws.wwwFolder)
if errors.Is(err, os.ErrNotExist) { if errors.Is(err, os.ErrNotExist) {
log.Fatalln("Fatal: www folder " + ws.wwwFolder + " does not exist") log.Fatalln("Fatal: www folder " + ws.wwwFolder + " does not exist")
} else if err != nil {
log.Fatalln("Fatal: " + err.Error())
}
perms, err := fileperm.New(ws.wwwFolder)
if err != nil {
log.Fatalln("Fatal: " + err.Error())
}
if !perms.UserReadable() {
log.Fatalln("Fatal: missing permissions to read www folder")
} }
ws.ipFilterMode, ws.ipFilter = ws.parseFilterPanics(FILENAME_IPFILTER) ws.ipFilterMode, ws.ipFilter = ws.parseFilterPanics(FILENAME_IPFILTER)