Skip to content

Commit 0350e76

Browse files
authored
fix: manual install backend (janhq#8062)
The decompress Tauri command validated both the archive path and the output directory against the Jan data folder, preventing extraction of archives located elsewhere. Only the output directory needs that restriction; the input path is read-only.
1 parent e05bb2f commit 0350e76

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src-tauri/src/core/filesystem/commands.rs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -180,7 +180,7 @@ pub fn decompress<R: Runtime>(
180180
path: &str,
181181
output_dir: &str,
182182
) -> Result<(), String> {
183-
let (_jan_data_folder, path_buf) = resolve_app_path_within_jan_data_folder(app.clone(), path)?;
183+
let path_buf = std::path::PathBuf::from(path);
184184
let (_jan_data_folder, output_dir_buf) =
185185
resolve_app_path_within_jan_data_folder(app, output_dir)?;
186186

0 commit comments

Comments
 (0)