fix exploit with //// in music list

This commit is contained in:
Chayapak 2023-10-16 09:05:23 +07:00
parent 5b403dc9ca
commit d43ef39b08

View file

@ -368,9 +368,7 @@ public class MusicCommand extends Command {
final String stringPathIfExists = context.getString(true, false); final String stringPathIfExists = context.getString(true, false);
final Path path = (stringPathIfExists.isEmpty()) ? final Path path = Path.of(
root :
Path.of(
root.toString(), root.toString(),
stringPathIfExists stringPathIfExists
); );
@ -395,7 +393,12 @@ public class MusicCommand extends Command {
location = Paths.get(""); // wtf mabe location = Paths.get(""); // wtf mabe
} }
final String joinedPath = stringPathIfExists.isEmpty() ? eachPath.getFileName().toString() : Paths.get(location.getFileName().toString(), eachPath.getFileName().toString()).toString(); final String joinedPath = location.equals(root) ?
eachPath.getFileName().toString() :
Paths.get(
location.getFileName().toString(),
eachPath.getFileName().toString()
).toString();
fullList.add( fullList.add(
Component Component