Skip to content
This repository was archived by the owner on Sep 3, 2022. It is now read-only.

Conversation

@MatthewFrench
Copy link
Contributor

Updated testbox to delete old versions of the game, close running instances after 2 hours and catch crashing errors.

…tances after 2 hours and catch crashing errors.
console.log(`child process exited with code ${code}`);

try {
rmdir('../Game-Server-Repositories/'+serverName, function(error){
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This might be directory traversal exploitable if serverName contains user input from anywhere. For example, if I call my server ../../../../ it could end up deleting a lot more than what you'd expect

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

var fileName = d.getFullYear() + '' + d.getMonth() + '' + d.getDate() + '' + d.getHours() + '' +

Server name is generated server side.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants