Use Path.Join and Path.GetFileName for adding mods to not allow arbitrary folder but only those in the penumbra root directory.

This commit is contained in:
Ottermandias 2022-11-18 11:42:23 +01:00
parent 353694177e
commit 03bbba6735

View file

@ -371,7 +371,7 @@ public class PenumbraApi : IDisposable, IPenumbraApi
public PenumbraApiEc AddMod( string modDirectory )
{
CheckInitialized();
var dir = new DirectoryInfo( Path.Join( Penumbra.ModManager.BasePath.FullName, modDirectory ) );
var dir = new DirectoryInfo( Path.Join( Penumbra.ModManager.BasePath.FullName, Path.GetFileName(modDirectory) ) );
if( !dir.Exists )
{
return PenumbraApiEc.FileMissing;