Dymas/jarri-spooty
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Add deterministic YouTube matching and fix download path guard

Browse Source
This commit is contained in:
Tor Wingalen
2026-05-14 18:18:37 +02:00
parent 4bb61f5ebe
commit 20632c6f9f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/backend/src/shared/utils.service.ts
+1 -1
View File
@@ -26,7 +26,7 @@ export class UtilsService {
const resolvedCandidate = resolve(candidatePath);
const rel = relative(root, resolvedCandidate);
if (rel === '' || (!rel.startsWith('..') && !resolve(rel).startsWith('/'))) {
if (rel === '' || (!rel.startsWith('..') && !relative('', rel).startsWith('..'))) {
return resolvedCandidate;
}