diff --git a/src/webui/webui.c b/src/webui/webui.c index 77a5f055..818b137d 100644 --- a/src/webui/webui.c +++ b/src/webui/webui.c @@ -87,6 +87,9 @@ page_static_file(http_connection_t *hc, const char *remain, void *opaque) struct stat st; const char *content = NULL, *postfix; + if(remain == NULL) + return 404; + if(strstr(remain, "..")) return HTTP_STATUS_BAD_REQUEST;