This fixes an issue regarding path traversal in the preset system.
As the issue has been discussed already, I'm not going to give a description on how to exploit it, but I was able to copy any file of the server to any location I want.
This PR simply checks if a preset would be located inside the preset directory. If not, the saving/loading fails.
This fixes an issue regarding path traversal in the preset system. As the issue has been discussed already, I'm not going to give a description on how to exploit it, but I was able to copy any file of the server to any location I want.
This PR simply checks if a preset would be located inside the preset directory. If not, the saving/loading fails.