 wanji
|
d7e2710d4a
|
security: fix fetching an arbirtrary file from the host server on stream endpoint
+ fix path traversal
+ check if requested file is outside root dirs
+ confirm resolved track hash matches the requested trackhash
|
2025-12-01 10:41:29 +03:00 |
|