Harden remaining path-construction sinks against traversal

2026-07-17 16:51:19 +02:00
parent 1a45fc82b5
commit 21801e8ba1
5 changed files with 17 additions and 10 deletions
@@ -893,7 +893,7 @@ namespace Jellyfin.Server.Implementations.Users

        internal static void ThrowIfInvalidUsername(string name)
        {
-            if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name))
+            if (!string.IsNullOrWhiteSpace(name) && ValidUsernameRegex().IsMatch(name) && name != "." && name != "..")
            {
                return;
            }