fix(static): safe decode path (#1459)

nitrojs · Jul 19, 2023 · 88831dc · 88831dc
1 parent 3687d31
commit 88831dc
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/runtime/static.ts b/src/runtime/static.ts
@@ -1,5 +1,11 @@
 import { eventHandler, createError } from "h3";
-import { joinURL, withoutTrailingSlash, withLeadingSlash, parseURL } from "ufo";
+import {
+  decodePath,
+  joinURL,
+  parseURL,
+  withLeadingSlash,
+  withoutTrailingSlash,
+} from "ufo";
 import {
   getAsset,
   readAsset,
@@ -16,7 +22,7 @@ export default eventHandler((event) => {
     return;
   }
 
-  let id = decodeURIComponent(
+  let id = decodePath(
     withLeadingSlash(
       withoutTrailingSlash(parseURL(event.node.req.url).pathname)
     )