fix: can traversal any md files

Signed-off-by: Raccoon <raccoon@hackmd.io>

Author: a60814billy

lib/models/note.js

@@ -97,7 +97,7 @@ module.exports = function (sequelize, DataTypes) {
             if (!note.alias) {
               filePath = config.defaultNotePath
             } else {
-              filePath = path.join(config.docsPath, note.alias + '.md')
+              filePath = path.join(config.docsPath, path.basename(node.alias) + '.md')
             }
             if (Note.checkFileExist(filePath)) {
               var fsCreatedTime = moment(fs.statSync(filePath).ctime)
@@ -206,7 +206,7 @@ module.exports = function (sequelize, DataTypes) {
           }
         }).then(function (note) {
           if (note) {
-            const filePath = path.join(config.docsPath, noteId + '.md')
+            const filePath = path.join(config.docsPath, path.basename(noteId) + '.md')
             if (Note.checkFileExist(filePath)) {
               // if doc in filesystem have newer modified time than last change time
               // then will update the doc in db
@@ -248,7 +248,7 @@ module.exports = function (sequelize, DataTypes) {
               return callback(null, note.id)
             }
           } else {
-            var filePath = path.join(config.docsPath, noteId + '.md')
+            var filePath = path.join(config.docsPath, path.basename(noteId) + '.md')
             if (Note.checkFileExist(filePath)) {
               Note.create({
                 alias: noteId,