From 67e0a6a945488c0f8f8734b48ebf2698ece7513f Mon Sep 17 00:00:00 2001 From: Vito0912 <86927734+Vito0912@users.noreply.github.com> Date: Thu, 12 Jun 2025 00:14:02 +0200 Subject: [PATCH] revert changes fixed by prior PR --- server/controllers/FileSystemController.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/controllers/FileSystemController.js b/server/controllers/FileSystemController.js index 370f12b4..d4e6b8e0 100644 --- a/server/controllers/FileSystemController.js +++ b/server/controllers/FileSystemController.js @@ -134,7 +134,7 @@ class FileSystemController { filepath = fileUtils.filePathToPOSIX(filepath) // Ensure filepath is inside library folder (prevents directory traversal) (And convert libraryFolder to Path to normalize) - if (!filepath.startsWith(Path.join(libraryFolder.path))) { + if (!filepath.startsWith(libraryFolder.path)) { Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`) return res.sendStatus(400) }