From 03bbba67359ec836791d0d39beb5fe75b94c1981 Mon Sep 17 00:00:00 2001
From: Ottermandias <nickroederspam+git1@gmail.com>
Date: Fri, 18 Nov 2022 11:42:23 +0100
Subject: [PATCH] Use Path.Join and Path.GetFileName for adding mods to not
 allow arbitrary folder but only those in the penumbra root directory.

---
 Penumbra/Api/PenumbraApi.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Penumbra/Api/PenumbraApi.cs b/Penumbra/Api/PenumbraApi.cs
index dd83e2f0..ace2b9f4 100644
--- a/Penumbra/Api/PenumbraApi.cs
+++ b/Penumbra/Api/PenumbraApi.cs
@@ -371,7 +371,7 @@ public class PenumbraApi : IDisposable, IPenumbraApi
     public PenumbraApiEc AddMod( string modDirectory )
     {
         CheckInitialized();
-        var dir = new DirectoryInfo( Path.Join( Penumbra.ModManager.BasePath.FullName, modDirectory ) );
+        var dir = new DirectoryInfo( Path.Join( Penumbra.ModManager.BasePath.FullName, Path.GetFileName(modDirectory) ) );
         if( !dir.Exists )
         {
             return PenumbraApiEc.FileMissing;