fix(server): normalize external path (#4239)

* fix: use normalized external path

* fix: move normalization to user core
This commit is contained in:
Jonathan Jogenfors
2023-10-06 22:47:38 +02:00
committed by GitHub
parent 35fa6397ea
commit 4dffae3f39
2 changed files with 4 additions and 1 deletions

View File

@@ -155,7 +155,7 @@ export class LibraryService {
return false;
}
if (!path.normalize(assetPath).match(new RegExp(`^${user.externalPath}`))) {
if (!path.normalize(assetPath).match(new RegExp(`^${path.normalize(user.externalPath)}`))) {
this.logger.error("Asset must be within the user's external path");
return false;
}