scanfing/httpfileserver

http文件服务器 可用于局域网内目录浏览和文件下载、上传。-- http server for browse directory and download / upload files

httpfileserver's Issues

存在一个安全漏洞

通过在url中添加..../的方式可以获取盘符中任意文件

ie加载上传插件时会提示错误。

网页错误详细信息

用户代理: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.2)
时间戳: Wed, 7 Jun 2023 09:29:37 UTC

消息: 缺少 ';'
行: 1167
字符: 9
代码: 0
URI: http://192.168.198.112/

查看源代码1167对应的是：
let uploadServer = './'
let mainBody = document.querySelector('body')
let files = []

加上; 后执行仍不能成功。我用的ie是ie 8.0.7601

断点续传有点问题

// 文件
https://github.com/scanfing/HttpFileServer/blob/main/src/HttpFileServer/Handlers/HttpGetHandler.cs

///

/// 断点续传响应支持
///

///
protected async Task ResponseContentPartial(string path, HttpListenerRequest request, HttpListenerResponse response, bool onlyHead = false)
{
...
response.AddHeader("Content-Range", $"bytes {range.Item1}-{range.Item2}/{stream.Length}");

var buff = new byte[81920];
var rangeEnd = range.Item2 > range.Item1 ? range.Item2 : stream.Length - 1;
// 此处应该为
// var bytesNeeds = rangeEnd + 1 - range.Item1;
var bytesNeeds = rangeEnd - range.Item1;
...

}