diff options
| author | Bond-009 <bond.009@outlook.com> | 2026-07-21 14:52:40 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-07-21 14:52:40 +0200 |
| commit | 9b9b609c83404faeff485919b18cb88ce6cc4db6 (patch) | |
| tree | 5f3d6897c40d0c1189c515bda5718cfbdc90f815 /Jellyfin.Server.Implementations/Users | |
| parent | 527ba2e11c8136980fb0864a360cd0c60f1128da (diff) | |
| parent | 4cc69f4be0a568ebc8c922dcf1f855458755ad85 (diff) | |
Merge pull request #17368 from Shadowghost/security-path-traversal-fixes
Backport and extend path traversal fixes
Diffstat (limited to 'Jellyfin.Server.Implementations/Users')
| -rw-r--r-- | Jellyfin.Server.Implementations/Users/UserManager.cs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Jellyfin.Server.Implementations/Users/UserManager.cs b/Jellyfin.Server.Implementations/Users/UserManager.cs index 41648268a9..81408d9aa8 100644 --- a/Jellyfin.Server.Implementations/Users/UserManager.cs +++ b/Jellyfin.Server.Implementations/Users/UserManager.cs @@ -911,7 +911,7 @@ namespace Jellyfin.Server.Implementations.Users internal static void ThrowIfInvalidUsername(string name) { - if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name)) + if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name) && !string.Equals(name, ".", StringComparison.Ordinal) && !string.Equals(name, "..", StringComparison.Ordinal)) { return; } |