From 129c6ff315feb9bc5a4fc4446672b46db888d897 Mon Sep 17 00:00:00 2001 From: Lisa Milne Date: Sun, 3 Dec 2023 14:12:47 +1000 Subject: [PATCH] more missing checks in vfs api --- clite/core.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/clite/core.js b/clite/core.js index 27edb82..87271fe 100644 --- a/clite/core.js +++ b/clite/core.js @@ -1785,10 +1785,14 @@ clite.vfs = { var n = vfsdata.api.getNode(uid,path); if (!n || (n.data.isdir && n.data.content.length > 0)) return false; + if (!checkCanWrite(uid,n)) + return false; var dir = clite.lib.dirname(path); var parent = vfsdata.api.getNode(0,dir); if (!parent) return false; + if (!checkCanWrite(uid,parent)) + return false; var c = []; parent.data.content.forEach(function(nn) { if (nn == n)