@@ -86,7 +86,7 @@ func (u *User) VirtualPathToRealPath(vpath string) (string, error) {
return "", err
}
- if strings.Contains(filepath.Clean(subpath), "..") {
+ if strings.Contains(filepath.ToSlash(filepath.Clean(subpath)), "../") || filepath.Clean(subpath) == ".." {
return "", errors.New("Request path out of storage root")