mirror of
https://github.com/jellyfin/jellyfin.git
synced 2025-12-28 03:34:46 +03:00
fixes #789 - Security Issue: API allows access to any folder of the PC running MediaBrowser
This commit is contained in:
@@ -25,7 +25,7 @@ namespace MediaBrowser.ServerApplication.Native
|
||||
public static void OpenDashboardPage(string page, User loggedInUser, IServerConfigurationManager configurationManager, IServerApplicationHost appHost, ILogger logger)
|
||||
{
|
||||
var url = "http://localhost:" + configurationManager.Configuration.HttpServerPortNumber + "/" +
|
||||
appHost.WebApplicationName + "/dashboard/" + page;
|
||||
appHost.WebApplicationName + "/web/" + page;
|
||||
|
||||
OpenUrl(url, logger);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user