From b3ac81b7b748de350975420950534e506de9468c Mon Sep 17 00:00:00 2001
From: hanhh <18330117883@163.com>
Date: Sun, 5 Sep 2021 23:48:58 +0800
Subject: [PATCH] =?UTF-8?q?config=E6=96=87=E4=BB=B6=E8=AF=BB=E5=8F=96?=
 =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E9=BB=91=E5=90=8D=E5=8D=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 back/api/config.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/back/api/config.ts b/back/api/config.ts
index b05f97f7..c86bde56 100644
--- a/back/api/config.ts
+++ b/back/api/config.ts
@@ -37,6 +37,9 @@ export default (app: Router) => {
       const logger: Logger = Container.get('logger');
       try {
         let content = '';
+        if (config.blackFileList.includes(req.params.file)) {
+          res.send({ code: 403, message: '文件无法访问' });
+        }
         if (req.params.file.includes('sample')) {
           content = getFileContentByName(
             `${config.samplePath}${req.params.file}`,
@@ -66,6 +69,9 @@ export default (app: Router) => {
       const logger: Logger = Container.get('logger');
       try {
         const { name, content } = req.body;
+        if (config.blackFileList.includes(name)) {
+          res.send({ code: 403, message: '文件无法访问' });
+        }
         const path = `${config.configPath}${name}`;
         fs.writeFileSync(path, content);
         res.send({ code: 200, message: '保存成功' });