'use strict' const express = require('express') const fs = require('fs') const path = require('path') const sqlite3 = require('sqlite3').verbose() const app = express() const port = 3000 const repositoryDirectory = './user-content-access/' app.set('view engine', 'pug') app.set('views', './views') const directoryExists = (path) => fs.existsSync(path) ? fs.statSync(path).isDirectory() : false app.get('*', (req, res) => { if (req.originalUrl.indexOf('\0') == -1) { let pathNormalized = path.normalize(req.path) let pathArray = pathNormalized.split('/').filter((x) => x.length > 0) let pathIsValid = (pathArray) => { if (pathArray.length > 0) { if (directoryExists(repositoryDirectory + pathArray[0])) { if (directoryExists(repositoryDirectory + pathArray.join('/'))) { return true } else return false } else return false } else return false } if (pathIsValid(pathArray)) { var dirList = fs.readdirSync(repositoryDirectory + pathArray.join('/'), (err, files) => { if (err) console.log(err) else return files }) res.render('index', { dirList: dirList }) } else res.send('Repository does not exist.') } else res.send('Null byte found in url. Nice try :)') }) app.listen(port, () => { console.log(`Example app listening on port ${port}`) })