Mirrors/audiobookshelf
Mirrors/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2025-06-23 01:18:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

revert changes fixed by prior PR

Browse Source
This commit is contained in:
Vito0912 2025-06-12 00:14:02 +02:00
parent d0e091f659
commit 67e0a6a945
No known key found for this signature in database
GPG Key ID: 29A3D509FE70B237
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/controllers/FileSystemController.js
View File

@ -134,7 +134,7 @@ class FileSystemController {
filepath = fileUtils.filePathToPOSIX(filepath) filepath = fileUtils.filePathToPOSIX(filepath)
// Ensure filepath is inside library folder (prevents directory traversal) (And convert libraryFolder to Path to normalize) // Ensure filepath is inside library folder (prevents directory traversal) (And convert libraryFolder to Path to normalize)
if (!filepath.startsWith(Path.join(libraryFolder.path))) { if (!filepath.startsWith(libraryFolder.path)) {
Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`) Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`)
return res.sendStatus(400) return res.sendStatus(400)
} }