diff options
Diffstat (limited to 'internal/app/path.go')
| -rw-r--r-- | internal/app/path.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/internal/app/path.go b/internal/app/path.go index 56e373d9..493dfe39 100644 --- a/internal/app/path.go +++ b/internal/app/path.go @@ -6,6 +6,10 @@ import ( ) func deepContainsH(basepath, targpath string) (bool, error) { + const upper = ".." + string(filepath.Separator) + rel, err := filepath.Rel(basepath, targpath) - return err == nil && rel != ".." && !strings.HasPrefix(rel, string([]byte{'.', '.', filepath.Separator})), err + return err == nil && + rel != ".." && + !strings.HasPrefix(rel, upper), err } |