Skip to content

Commit 6e291cf

Browse files
authored
Bugfix/add validation for file path (#5211)
add validation for file path
1 parent 89a0f23 commit 6e291cf

File tree

1 file changed

+9
-0
lines changed
  • packages/components/nodes/documentloaders/Folder

1 file changed

+9
-0
lines changed

packages/components/nodes/documentloaders/Folder/Folder.ts

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ import { DocxLoader } from '@langchain/community/document_loaders/fs/docx'
1010
import { LoadOfSheet } from '../MicrosoftExcel/ExcelLoader'
1111
import { PowerpointLoader } from '../MicrosoftPowerpoint/PowerpointLoader'
1212
import { handleEscapeCharacters } from '../../../src/utils'
13+
import { isPathTraversal } from '../../../src/validator'
1314

1415
class Folder_DocumentLoaders implements INode {
1516
label: string
@@ -125,6 +126,14 @@ class Folder_DocumentLoaders implements INode {
125126
const _omitMetadataKeys = nodeData.inputs?.omitMetadataKeys as string
126127
const output = nodeData.outputs?.output as string
127128

129+
if (!folderPath) {
130+
throw new Error('Folder path is required')
131+
}
132+
133+
if (isPathTraversal(folderPath)) {
134+
throw new Error('Invalid folder path: Path traversal detected. Please provide a safe folder path.')
135+
}
136+
128137
let omitMetadataKeys: string[] = []
129138
if (_omitMetadataKeys) {
130139
omitMetadataKeys = _omitMetadataKeys.split(',').map((key) => key.trim())

0 commit comments

Comments
 (0)