diff --git a/src/main/ipc/filesystem-auth.ts b/src/main/ipc/filesystem-auth.ts index dfeb00ea1..fe3340b9b 100644 --- a/src/main/ipc/filesystem-auth.ts +++ b/src/main/ipc/filesystem-auth.ts @@ -52,8 +52,7 @@ export function isDescendantOrEqual(resolvedTarget: string, resolvedBase: string // where relative('D:\\repo', 'C:\\etc\\passwd') returns absolute path 'C:\\etc\\passwd' return ( rel !== '' && - rel !== '..' && - !rel.startsWith(`..${sep}`) && + !(rel === '..' || rel.startsWith(`..${sep}`)) && !isAbsolute(rel) && resolve(resolvedBase, rel) === resolvedTarget )