Hardenened security of deleteLogEndpoint

This commit is contained in:
Jan Böhmer 2026-03-07 18:54:01 +01:00
parent 8bf25a1e38
commit 6d43a979b8

View file

@ -613,7 +613,7 @@ class UpdateExecutor
return false; return false;
} }
$logPath = $this->project_dir . '/' . self::UPDATE_LOG_DIR . '/' . $filename; $logPath = $this->project_dir . '/' . self::UPDATE_LOG_DIR . '/' . basename($filename);
if (!file_exists($logPath)) { if (!file_exists($logPath)) {
return false; return false;