Sultan
/
Flowise
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add validation for file path

This commit is contained in:
Henry 2025-09-15 14:41:16 +01:00
parent 89a0f23fe5
commit 366d25e2a0
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
packages/components/nodes/documentloaders/Folder/Folder.ts
View File

@ -10,6 +10,7 @@ import { DocxLoader } from '@langchain/community/document_loaders/fs/docx'
import { LoadOfSheet } from '../MicrosoftExcel/ExcelLoader'
import { PowerpointLoader } from '../MicrosoftPowerpoint/PowerpointLoader'
import { handleEscapeCharacters } from '../../../src/utils'
import { isPathTraversal } from '../../../src/validator'
class Folder_DocumentLoaders implements INode {
label: string
@ -125,6 +126,14 @@ class Folder_DocumentLoaders implements INode {
const _omitMetadataKeys = nodeData.inputs?.omitMetadataKeys as string
const output = nodeData.outputs?.output as string
if (!folderPath) {
throw new Error('Folder path is required')
}
if (isPathTraversal(folderPath)) {
throw new Error('Invalid folder path: Path traversal detected. Please provide a safe folder path.')
}
let omitMetadataKeys: string[] = []
if (_omitMetadataKeys) {
omitMetadataKeys = _omitMetadataKeys.split(',').map((key) => key.trim())