groove/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-12-22 11:49:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

revert changes fixed by prior PR

Browse source
This commit is contained in:
Vito0912 2025-06-12 00:14:02 +02:00
parent d0e091f659
commit 67e0a6a945
No known key found for this signature in database
GPG key ID: 29A3D509FE70B237
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
server/controllers/FileSystemController.js
View file

@ -134,7 +134,7 @@ class FileSystemController {
filepath = fileUtils.filePathToPOSIX(filepath) filepath = fileUtils.filePathToPOSIX(filepath)
// Ensure filepath is inside library folder (prevents directory traversal) (And convert libraryFolder to Path to normalize) // Ensure filepath is inside library folder (prevents directory traversal) (And convert libraryFolder to Path to normalize)
if (!filepath.startsWith(Path.join(libraryFolder.path))) { if (!filepath.startsWith(libraryFolder.path)) {
Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`) Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`)
return res.sendStatus(400) return res.sendStatus(400)
} }