170342-178601-パストリバーサル防止の実装

apps/app/src/server/routes/apiv3/app-settings/index.ts

@@ -18,7 +18,7 @@ import loggerFactory from '~/utils/logger';
 
 import { generateAddActivityMiddleware } from '../../../middlewares/add-activity';
 import { apiV3FormValidator } from '../../../middlewares/apiv3-form-validator';
-import { isFileNameSafeForBaseDir } from '../../util/safe-path-utils';
+import { isFileNameSafeForBaseDir } from '../../../util/safe-path-utils';
 import type { ApiV3Response } from '../interfaces/apiv3-response';
 
 const logger = loggerFactory('growi:routes:apiv3:app-settings');

apps/app/src/server/service/global-notification/global-notification-mail.ts

@@ -12,7 +12,7 @@ import { configManager } from '~/server/service/config-manager';
 import { growiInfoService } from '~/server/service/growi-info';
 import loggerFactory from '~/utils/logger';
 
-import { assertFileNameSafeForBaseDir } from '../util/safe-path-utils';
+import { assertFileNameSafeForBaseDir } from '../../util/safe-path-utils';
 import type { GlobalNotificationEventVars } from './types';
 
 const _logger = loggerFactory('growi:service:GlobalNotificationMailService');