TheTNB · Oct 26, 2024 · 2af4b95 · 2af4b95
1 parent b2845fb
commit 2af4b95
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/internal/service/file.go b/internal/service/file.go
@@ -179,6 +179,11 @@ func (s *FileService) Move(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if io.IsDir(req.Source) && strings.HasPrefix(req.Target, req.Source) {
+		Error(w, http.StatusForbidden, "你不能这样做，会玩坏的")
+		return
+	}
+
 	if err = io.Mv(req.Source, req.Target); err != nil {
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return
@@ -199,6 +204,11 @@ func (s *FileService) Copy(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if io.IsDir(req.Source) && strings.HasPrefix(req.Target, req.Source) {
+		Error(w, http.StatusForbidden, "你不能这样做，会玩坏的")
+		return
+	}
+
 	if err = io.Cp(req.Source, req.Target); err != nil {
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return