fix a bug and update test

Author: nunnly

lib/index.js

@@ -7,7 +7,14 @@ var utils = require('./utils');
 
 function HttpServer(option) {
     var server = http.createServer(function (req, res) {
-        var targetPath = path.join(rootPath, req.url);
+        var requestPath = path.join(rootPath, req.url);
+        var targetPath;
+        if(!utils.allowPath(requestPath, rootPath)){
+            targetPath = rootPath;
+            req.url = '/';
+        }else {
+            targetPath = requestPath;
+        }
         if (fs.existsSync(targetPath)) {
             var targetType = fs.lstatSync(targetPath);
             if (targetType.isFile()) {

lib/utils.js

@@ -79,4 +79,8 @@ exports.assign = function (target) {
     } else {
         assignObject.apply(null, arguments)
     }
+}
+
+exports.allowPath = function(requestPath, enablePath){
+    return requestPath.indexOf(enablePath) === 0;
 }

package-lock.json

@@ -71,7 +71,15 @@ describe('m-server', function() {
       var ret = utils.sort('3','3');
       done();
       assert(ret === 0)
-    })
+    });
+    it('allow enable path', function(done){
+      assert(utils.allowPath('/test/b/a/c', '/test/b') === true);
+      done();
+    });
+    it('allow disable path', function(done){
+      assert(utils.allowPath('/c/c', '/test/b') === false);
+      done();
+    });
 
   });
 });