chore: update polling example

kukhariev · Dec 19, 2024 · 672fe33 · 672fe33
1 parent 813dece
commit 672fe33
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/examples/express-polling.ts b/examples/express-polling.ts
@@ -21,10 +21,13 @@ const onComplete: express.RequestHandler = (req, res) => {
   const moving = (processes[file.name] ??= {} as Moving);
   if (!moving.status) {
     moving.status = 'moving';
-    const source = storage.getFilePath(file.name);
-    const destination = path.resolve(moveTo, file.originalName);
     void (async () => {
       try {
+        const source = storage.getFilePath(file.name);
+        const destination = path.resolve(moveTo, file.originalName);
+        if (!destination.startsWith(path.resolve(moveTo))) {
+          throw new Error(`Invalid destination path: ${destination}`);
+        }
         await copyFile(source, destination);
         await storage.delete(file);
         moving.status = 'done';