diff --git a/internal/mgmt/acmeroutes.go b/internal/mgmt/acmeroutes.go index 091c968..e3610ae 100644 --- a/internal/mgmt/acmeroutes.go +++ b/internal/mgmt/acmeroutes.go @@ -50,7 +50,7 @@ func (p *acmeProvider) CleanUp(domain, token, keyAuth string) error { return p.provider.CleanUp(domain, token, keyAuth) } -func handleDNSRoutes(r chi.Router) { +func handleACMEChallengeRoutes(r chi.Router) { handleACMEChallenges := func(r chi.Router) { r.Post("/{domain}", createChallenge) diff --git a/internal/mgmt/route.go b/internal/mgmt/route.go index 95e963b..6007021 100644 --- a/internal/mgmt/route.go +++ b/internal/mgmt/route.go @@ -53,6 +53,7 @@ func getACMEChallenges(w http.ResponseWriter, r *http.Request) { } */ + // disallow FS characters if strings.ContainsAny(host, "/:|\\") { host = "" } @@ -186,7 +187,7 @@ func RouteAll(r chi.Router) { }) }) - handleDNSRoutes(r) + handleACMEChallengeRoutes(r) handleDeviceRoutes(r) r.Get("/inspect", func(w http.ResponseWriter, r *http.Request) {