util: disallow empty content server-side too

2020-02-20 13:22:16 +08:00 · 2020-02-20 13:22:16 +08:00 · 4338ea55e9
parent 3a3ea823a9
commit 4338ea55e9
1 changed files with 2 additions and 1 deletions
--- a/src/util.coffee
+++ b/src/util.coffee
@ -16,7 +16,8 @@ MAX_FILENAME_LENGTH = 255 # bytes

 # Validate content-length header
 validateLength = (req) ->
-  (Number.parseInt req.headers.get "content-length") <= MAX_UPLOAD_SIZE
+  len = Number.parseInt req.headers.get "content-length"
+  len <= MAX_UPLOAD_SIZE && len > 0

 # Only accept paths like `/paste/:file_name`
 # No further slahses are supported