Http EOS client: more robust url parsing

cs3org · Jun 17, 2021 · 1baa5a7 · 1baa5a7
1 parent b6ff7a4
commit 1baa5a7
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/pkg/eosclient/eosgrpc/eos_http/eoshttp.go b/pkg/eosclient/eosgrpc/eos_http/eoshttp.go
@@ -27,7 +27,6 @@ import (
 	"net/http"
 	"net/url"
 	"os"
-	"path"
 	"strconv"
 	"strings"
 	"time"
@@ -240,7 +239,10 @@ func (c *Client) buildFullURL(urlpath, uid, gid string) (string, error) {
 		return "", err
 	}
 
-	u.Path = path.Join(u.Path, urlpath)
+	u, err = u.Parse(urlpath)
+	if err != nil {
+		return "", err
+	}
 
 	// I feel safer putting here a check, to prohibit malicious users to
 	// inject a false uid/gid into the url