Add additional reserved names and characters
Added CONIN$,CONOUT$ and characters <>:"/\|?* Added .Split('.')[0] to folder.Name to catch names like CON.txt and allow names like CONTRACT.
This commit is contained in:
@ -214,7 +214,8 @@ namespace Oqtane.Controllers
|
||||
private bool FolderPathValid(Folder folder)
|
||||
{
|
||||
// prevent folder path traversal and reserved devices
|
||||
return (!folder.Name.Contains("\\") && !folder.Name.Contains("/") && !Constants.ReservedDevices.Split(',').Contains(folder.Name.ToUpper()));
|
||||
return (folder.Name.IndexOfAny(@"<>:""/\|?*".ToCharArray()) == -1 &&
|
||||
!Constants.ReservedDevices.Split(',').Contains(folder.Name.ToUpper().Split('.')[0]));
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user