Fix path traversal vulnerability, issue #21

gen2brain · Jun 21, 2022 · 74aec43 · 74aec43
1 parent fa2f5a7
commit 74aec43
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/unarr.go b/unarr.go
@@ -170,7 +170,8 @@ func (a *Archive) Offset() int64 {
 
 // Name returns the name of the current entry as UTF-8 string
 func (a *Archive) Name() string {
-	return unarrc.EntryGetName(a.archive)
+	name, _ := filepath.Abs(unarrc.EntryGetName(a.archive))
+	return name
 }
 
 // RawName returns the name of the current entry as raw string