From e04368fa01471db828107f4f351c77f816741469 Mon Sep 17 00:00:00 2001 From: orignal Date: Wed, 14 Oct 2026 20:34:46 -0400 Subject: [PATCH] reject url with . as file name --- libi2pd_client/TorrentsRPC.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libi2pd_client/TorrentsRPC.cpp b/libi2pd_client/TorrentsRPC.cpp index ba852dcd..4ed2e836 100644 --- a/libi2pd_client/TorrentsRPC.cpp +++ b/libi2pd_client/TorrentsRPC.cpp @@ -988,7 +988,7 @@ namespace torrents LogPrint (eLogDebug, "TorrentsRPC: Tunnel not found or web is not supported ", subUrlPath->string ()); } } - if (!isPathValid || fileSubUrl.string ().find ("..") != std::string::npos) + if (!isPathValid || fileSubUrl.string ().find ("..") != std::string::npos || fileSubUrl == ".") { SendResponse (boost::beast::http::status::forbidden); return;