Merge pull request #293 from tosuapp/fix/check-file

fix: Prevent sending file if it doesnt exists, or it's not a file
tosuapp · Feb 3, 2025 · 52f333e · 52f333e
2 parents 9e72190 + 4f252cd
commit 52f333e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/packages/server/scripts/beatmapFile.ts b/packages/server/scripts/beatmapFile.ts
@@ -40,6 +40,12 @@ export function beatmapFileShortcut(
 
     const filePath = path.join(folder, fileName);
     const fileStat = fs.statSync(filePath);
+    if (!fileStat.isFile() || !fs.existsSync(filePath)) {
+        res.writeHead(404, {
+            'Content-Type': getContentType(fileName)
+        });
+        return res.end();
+    }
 
     if (req.headers.range) {
         const range = req.headers.range.replace('bytes=', '').split('-');