prevent empty input from sharing the I2P working dir

2019-12-22 22:17:57 +00:00
parent 8e3f76f68c
commit 6283287bee
1 changed files with 1 additions and 1 deletions
--- a/webui/src/main/java/com/muwire/webui/FilesServlet.java
+++ b/webui/src/main/java/com/muwire/webui/FilesServlet.java
@ -143,7 +143,7 @@ public class FilesServlet extends HttpServlet {
        }
        if (action.equals("share")) {
            String file = req.getParameter("file");
-            if (file == null) {
+            if (file == null || file.trim().length() == 0) {
                resp.sendError(403, "Bad param");
                return;
            }