From 01c8df01ec0608f1f25b2f1444adabb98fa5ee8a Mon Sep 17 00:00:00 2001
From: Unknwon <u@gogs.io>
Date: Thu, 24 Oct 2019 01:51:46 -0700
Subject: internal: move packages under this directory (#5836)

* Rename pkg -> internal

* Rename routes -> route

* Move route -> internal/route

* Rename models -> db

* Move db -> internal/db

* Fix route2 -> route

* Move cmd -> internal/cmd

* Bump version
---
 internal/tool/path.go | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 internal/tool/path.go

(limited to 'internal/tool/path.go')

diff --git a/internal/tool/path.go b/internal/tool/path.go
new file mode 100644
index 00000000..e95bba8b
--- /dev/null
+++ b/internal/tool/path.go
@@ -0,0 +1,23 @@
+// Copyright 2018 The Gogs Authors. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
+package tool
+
+import (
+	"path/filepath"
+	"strings"
+)
+
+// IsSameSiteURLPath returns true if the URL path belongs to the same site, false otherwise.
+// False: //url, http://url, /\url
+// True: /url
+func IsSameSiteURLPath(url string) bool {
+	return len(url) >= 2 && url[0] == '/' && url[1] != '/' && url[1] != '\\'
+}
+
+// IsMaliciousPath returns true if given path is an absolute path or contains malicious content
+// which has potential to traverse upper level directories.
+func IsMaliciousPath(path string) bool {
+	return filepath.IsAbs(path) || strings.Contains(path, "..")
+}
-- 
cgit v1.2.3