diff --git a/internal/pkg/printer/markdown.go b/internal/pkg/printer/markdown.go index bbbeea7b..4bffdcce 100644 --- a/internal/pkg/printer/markdown.go +++ b/internal/pkg/printer/markdown.go @@ -57,6 +57,7 @@ type templateData struct { func markdownToHTML(dirPath, filename string) (template.HTML, error) { const op string = "printer.markdownToHTML" + // avoid directory traversal. filename = filepath.Base(filename) fpath := fmt.Sprintf("%s/%s", dirPath, filename) b, err := ioutil.ReadFile(fpath)