Replay: only accept ./single/

2800549f · Chen Bill · 92dacaea · 2800549f
Commit 2800549f authored May 10, 2025 by Chen Bill
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 1 deletion

gframe/replay.cpp gframe/replay.cpp +5 -1

No files found.
--- a/gframe/replay.cpp
+++ b/gframe/replay.cpp
@@ -251,7 +251,11 @@ bool Replay::ReadInfo() {
 		if (!ReadData(filename, slen))
 			return false;
 		filename[slen] = 0;
-		script_name = filename;
+		if (std::strncmp(filename, "./single/", 9))
+			return false;
+		script_name = filename + 9;
+		if (script_name.find_first_of(R"(/\)") != std::string::npos)
+			return false;
 	}
 	else {
 		for (int p = 0; p < player_count; ++p) {