fs: sanitize colons from file requests on windows

seanmonstar · Sep 27, 2022 · 0074a0a · 0074a0a
1 parent 3cf1783
commit 0074a0a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/filters/fs.rs b/src/filters/fs.rs
@@ -123,7 +123,10 @@ fn sanitize_path(base: impl AsRef<Path>, tail: &str) -> Result<PathBuf, Rejectio
             tracing::warn!("dir: rejecting segment starting with '..'");
             return Err(reject::not_found());
         } else if seg.contains('\\') {
-            tracing::warn!("dir: rejecting segment containing with backslash (\\)");
+            tracing::warn!("dir: rejecting segment containing backslash (\\)");
+            return Err(reject::not_found());
+        } else if cfg!(windows) && seg.contains(':') {
+            tracing::warn!("dir: rejecting segment containing colon (:)");
             return Err(reject::not_found());
         } else {
             buf.push(seg);