Express res.sendfile throwing forbidden error

Question

I have this code:

res.sendfile( \'../../temp/index.html\' )

However, it throws this error:

Error: Forbidden
at SendStream.e         


        

Answer 1

I believe it's because of the relative path; the "../" is considered malicious. Resolve the local path first, then call res.sendfile. You can resolve the path with path.resolve beforehand.

var path = require('path');
res.sendFile(path.resolve('temp/index.html'));