Validate filename is mongoId before we load it as profile #648
This commit is contained in:
@@ -70,7 +70,12 @@ public class SaveServer(
|
|||||||
var stopwatch = Stopwatch.StartNew();
|
var stopwatch = Stopwatch.StartNew();
|
||||||
foreach (var file in files)
|
foreach (var file in files)
|
||||||
{
|
{
|
||||||
await LoadProfileAsync(fileUtil.StripExtension(file));
|
// Only allow files that fit the criteria of being a mongo id be parsed
|
||||||
|
var filename = Path.GetFileNameWithoutExtension(file);
|
||||||
|
if (MongoId.IsValidMongoId(filename))
|
||||||
|
{
|
||||||
|
await LoadProfileAsync(fileUtil.StripExtension(file));
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
stopwatch.Stop();
|
stopwatch.Stop();
|
||||||
|
|||||||
Reference in New Issue
Block a user