Prevent to create or choose file outside of scope (!34438) · Merge requests · Rafał Mikrut / godot

Rafał Mikrut requested to merge github/fork/NoFr1ends/validate-scope-path into master Dec 18, 2019

Created by: NoFr1ends

Validate relative paths in file dialog to make sure that the provided path doesn't escape the scope of the file dialog. Before it was possible to create, save or open a file outside of res:// for example.

We also could move the check_access_scope to the driver implementation to let the operating system resolves the relative path and then make sure that the resolved path still starts with the root path of DirAccess. Feedback wanted.

Prevent to create or choose file outside of scope

Merge request reports