arriej/homepage-Mirror
1
0
Fork 0
mirror of https://github.com/gethomepage/homepage.git synced 2025-12-05 21:47:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

Security: refactor disk resource lookup logic (#5666)

Browse Source
This commit is contained in:
shamoon
2025-08-13 06:16:12 -07:00
committed by GitHub
parent f0fd125e37
commit d30016304b
1 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/pages/api/widgets/resources.js
View File

@@ -1,5 +1,3 @@
import { existsSync } from "fs";
import createLogger from "utils/logger";
const logger = createLogger("resources");
@@ -20,17 +18,18 @@ export default async function handler(req, res) {
}
if (type === "disk") {
if (!existsSync(target)) {
return res.status(404).json({
error: "Target not found",
});
}
const requested = typeof target === "string" && target ? target : "/";
const fsSize = await si.fsSize();
logger.debug("fsSize:", JSON.stringify(fsSize));
return res.status(200).json({
drive: fsSize.find((fs) => fs.mount === target) ?? fsSize.find((fs) => fs.mount === "/"),
});
const drive = fsSize.find((fs) => fs.mount === requested) ?? fsSize.find((fs) => fs.mount === "/");
if (!drive) {
logger.warn(`Drive not found for target: ${requested}`);
return res.status(404).json({ error: "Resource not available." });
}
return res.status(200).json({ drive });
}
if (type === "memory") {