djp952 / pvr.hdhomerundvr

Unofficial Kodi HDHomeRun DVR PVR Client
https://github.com/djp952/pvr.hdhomerundvr/wiki
Other
60 stars 9 forks source link

Canonicalize all file system paths prior to using them #115

Closed djp952 closed 1 year ago

djp952 commented 2 years ago

Not canonicalizing any file system path set via settings (EDL folders, for example) or anywhere the user might be able to manipulate it exposes a potential Path Traversal vulnerability. This has to be corrected.

djp952 commented 1 year ago

Meh. Closing.