git_misc: Sanitize paths

1 files changed, 10 insertions, 0 deletions

diff --git a/git_misc.go b/git_misc.go
index a5bcc9e..3aded4f 100644
--- a/git_misc.go
+++ b/git_misc.go
@@ -12,7 +12,17 @@ import (
 	"go.lindenii.runxiyu.org/lindenii-common/misc"
 )
 
+var err_unsafe_path = errors.New("Unsafe path")
+
 func open_git_repo(group_name, repo_name string) (*git.Repository, error) {
+	group_name, group_name_ok := misc.Sanitize_path(group_name)
+	if !group_name_ok {
+		return nil, err_unsafe_path
+	}
+	repo_name, repo_name_ok := misc.Sanitize_path(repo_name)
+	if !repo_name_ok {
+		return nil, err_unsafe_path
+	}
 	return git.PlainOpen(filepath.Join(config.Git.Root, group_name, repo_name+".git"))
 }