diff options
| author | Erwin de Haan <EraYaN@users.noreply.github.com> | 2021-03-20 00:38:58 +0100 |
|---|---|---|
| committer | Erwin de Haan <EraYaN@users.noreply.github.com> | 2021-03-20 01:14:59 +0100 |
| commit | f61d18612b2e6c6e9a5dd4510331ac8d89a337d5 (patch) | |
| tree | 6954d8bb64542f4215296cec331251d87d22e219 /Jellyfin.Api/Controllers/ImageByNameController.cs | |
| parent | 9360fecb316973181a120027f70b311b219740cd (diff) | |
Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way.
GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes
Diffstat (limited to 'Jellyfin.Api/Controllers/ImageByNameController.cs')
0 files changed, 0 insertions, 0 deletions