pauher
/
LocationAPI
mirror of https://github.com/Misscott/LocationAPI.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

multer optional path and res fix

This commit is contained in:
Pau 2025-05-14 20:17:08 +02:00
parent 69b111d995
commit c0b64962f3
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/middlewares/upload.js
View File

@ -11,16 +11,17 @@ if (!fs.existsSync(uploadDir)) {
const storage = multer.diskStorage({
destination: (req, file, cb) => {
let userPath = req.body.path || '';
const userPath = req.body?.path || ''; //optional path from request body
userPath = path.normalize(userPath).replace(/^(\.\.[\/\\])+/, '');
const normalizedUserPath = path.normalize(userPath).replace(/^(\.\.[\/\\])+/, '');
const targetPath = path.join(uploadDir, userPath);
const targetPath = path.join(uploadDir, normalizedUserPath);
if (!targetPath.startsWith(uploadDir)) {
return cb(new Error('Invalid path.'));
}
// Crea el directorio si no existe
if (!fs.existsSync(targetPath)) {
fs.mkdirSync(targetPath, { recursive: true });
}
@ -60,13 +61,13 @@ const uploadMiddleware = (fieldName, multiple = false) => (req, res, next) => {
uploader(req, res, (err) => {
if (err instanceof multer.MulterError) {
return res.status(400).json({ error: err.message });
res.status(400).json({ error: err.message });
} else if (err) {
return res.status(500).json({ error: 'Internal server error during file upload.' });
res.status(500).json({ error: 'Internal server error during file upload.' });
}
if (!multiple && !req.file) {
return res.status(400).json({ error: `No file uploaded under field "${fieldName}"` });
res.status(400).json({ error: `No file uploaded under field "${fieldName}"` });
}
const result = req.file