Restriction on buffer.uri containing ".." is too limiting

qmuntal / gltf

Go library for encoding glTF 2.0 files

https://www.khronos.org/gltf/

BSD 2-Clause "Simplified" License

241 stars 32 forks source link

Restriction on buffer.uri containing ".." is too limiting #74

Closed Mythic117 closed 7 months ago

Mythic117 commented 7 months ago

Perhaps this restriction is intended to prevent navigation to the parent directory. However, a buffer with ".." in its base name cannot be loaded either, for example, "A..B.bin".

qmuntal commented 7 months ago

Thanks for reporting this issue @Mythic117. Agree that this is too strict. We could use filepath.IsLocal instead here.