From a0007b42f9fdc8a7f48b7dcb9100fae5be10fbb7 Mon Sep 17 00:00:00 2001 From: Petr Sloup Date: Wed, 9 Mar 2016 17:24:49 +0100 Subject: [PATCH] Do not allow dot character in request extensions --- src/serve_raster.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/serve_raster.js b/src/serve_raster.js index e9a36e8..853ac92 100644 --- a/src/serve_raster.js +++ b/src/serve_raster.js @@ -182,7 +182,7 @@ module.exports = function(maps, options, prefix) { .replace('{z}', ':z(\\d+)') .replace('{x}', ':x(\\d+)') .replace('{y}', ':y(\\d+)') - .replace('{format}', ':format([\\w\\.]+)'); + .replace('{format}', ':format([\\w]+)'); var respondImage = function(z, lon, lat, width, height, scale, format, res, next) { if (Math.abs(lon) > 180 || Math.abs(lat) > 85.06) { @@ -267,7 +267,7 @@ module.exports = function(maps, options, prefix) { }); var staticPattern = - '/static/%s:scale(' + SCALE_PATTERN + ')?\.:format([\\w\\.]+)'; + '/static/%s:scale(' + SCALE_PATTERN + ')?\.:format([\\w]+)'; var centerPattern = util.format(':lon(%s),:lat(%s),:z(\\d+)/:width(\\d+)x:height(\\d+)',