54 lines
1.3 KiB
C#
54 lines
1.3 KiB
C#
|
namespace WCTDataMiner.Core.Security;
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 安全相关常量定义
|
|||
|
|
/// </summary>
|
|||
|
|
public static class SecurityConstants
|
|||
|
|
{
|
|||
|
|
/// <summary>
|
|||
|
|
/// 默认允许的输出目录
|
|||
|
|
/// </summary>
|
|||
|
|
public static readonly string[] DefaultAllowedExportDirectories =
|
|||
|
|
[
|
|||
|
|
"exports",
|
|||
|
|
"output",
|
|||
|
|
"data/exports",
|
|||
|
|
"data/output"
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 路径最大长度限制
|
|||
|
|
/// </summary>
|
|||
|
|
public const int MaxPathLength = 260;
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 文件名最大长度限制
|
|||
|
|
/// </summary>
|
|||
|
|
public const int MaxFileNameLength = 255;
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 禁止的路径模式
|
|||
|
|
/// </summary>
|
|||
|
|
public static readonly string[] ForbiddenPathPatterns =
|
|||
|
|
[
|
|||
|
|
"..", // 路径遍历
|
|||
|
|
"~", // 用户主目录
|
|||
|
|
"\\\\", // UNC 路径开始
|
|||
|
|
"|", // 管道字符（Windows 禁止）
|
|||
|
|
">", // 重定向字符
|
|||
|
|
"<", // 重定向字符
|
|||
|
|
"*", // 通配符（用于文件名时）
|
|||
|
|
"?" // 通配符（用于文件名时）
|
|||
|
|
];
|
|||
|
|
|
|||
|
|
/// <summary>
|
|||
|
|
/// 安全的文件扩展名白名单
|
|||
|
|
/// </summary>
|
|||
|
|
public static readonly string[] AllowedExportExtensions =
|
|||
|
|
[
|
|||
|
|
".csv",
|
|||
|
|
".json",
|
|||
|
|
".txt",
|
|||
|
|
".log"
|
|||
|
|
];
|
|||
|
|
}
|