#36: fix for .. as well

trenz-gmbh · Jul 10, 2023 · 3bf3f73 · 3bf3f73
1 parent 532add4
commit 3bf3f73
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/TRENZ.Docs.API/Models/Sources/AbstractFilesystemSource.cs b/TRENZ.Docs.API/Models/Sources/AbstractFilesystemSource.cs
@@ -28,7 +28,7 @@ public IEnumerable<ISourceFile> FindFiles(Regex pattern)
     {
         var combinedRoot = FSPath.Combine(Root, Path);
 
-        if (combinedRoot.Length < Root.Length)
+        if (FSPath.GetFullPath(combinedRoot).Length < Root.Length)
             throw new SecurityException(ExceptionMessages.PreventedPathTraversal);
 
         return IterateDirectory(pattern, combinedRoot, combinedRoot);