diff options
| author | Shadowghost <Ghost_of_Stone@web.de> | 2026-07-17 16:51:19 +0200 |
|---|---|---|
| committer | Shadowghost <Ghost_of_Stone@web.de> | 2026-07-17 17:08:59 +0200 |
| commit | 21801e8ba138af71c4c58489ea33534adf7426c5 (patch) | |
| tree | ab6e3584f7d7917a12af292e963c86fa56312631 /Jellyfin.Server.Implementations | |
| parent | 1a45fc82b5c0b7c7623be4117d15140cda020387 (diff) | |
Harden remaining path-construction sinks against traversal
Diffstat (limited to 'Jellyfin.Server.Implementations')
| -rw-r--r-- | Jellyfin.Server.Implementations/Users/UserManager.cs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Jellyfin.Server.Implementations/Users/UserManager.cs b/Jellyfin.Server.Implementations/Users/UserManager.cs index 583f29f94f..136d2d6029 100644 --- a/Jellyfin.Server.Implementations/Users/UserManager.cs +++ b/Jellyfin.Server.Implementations/Users/UserManager.cs @@ -893,7 +893,7 @@ namespace Jellyfin.Server.Implementations.Users internal static void ThrowIfInvalidUsername(string name) { - if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name)) + if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name) && name != "." && name != "..") { return; } |