From 20632c6f9f228672735400b26ad83270af45994e Mon Sep 17 00:00:00 2001 From: Tor Wingalen Date: Thu, 14 May 2026 18:18:37 +0200 Subject: [PATCH] Add deterministic YouTube matching and fix download path guard --- src/backend/src/shared/utils.service.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/backend/src/shared/utils.service.ts b/src/backend/src/shared/utils.service.ts index 73ea1cc..0c3ba66 100644 --- a/src/backend/src/shared/utils.service.ts +++ b/src/backend/src/shared/utils.service.ts @@ -26,7 +26,7 @@ export class UtilsService { const resolvedCandidate = resolve(candidatePath); const rel = relative(root, resolvedCandidate); - if (rel === '' || (!rel.startsWith('..') && !resolve(rel).startsWith('/'))) { + if (rel === '' || (!rel.startsWith('..') && !relative('', rel).startsWith('..'))) { return resolvedCandidate; }