From 079599b91bff99f358df8253d868c5bedf1cf68f Mon Sep 17 00:00:00 2001 From: Matt Joiner Date: Sun, 25 Dec 2022 18:20:42 +1100 Subject: [PATCH] Don't use path.Join in default webseed path escaper Thanks fuzzing! --- webseed/request.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/webseed/request.go b/webseed/request.go index e7c28155..53fe6dba 100644 --- a/webseed/request.go +++ b/webseed/request.go @@ -4,7 +4,6 @@ import ( "fmt" "net/http" "net/url" - "path" "strings" "github.com/anacrolix/torrent/metainfo" @@ -31,7 +30,7 @@ func defaultPathEscaper(pathComps []string) string { esc = strings.ReplaceAll(esc, "+", "%2B") ret = append(ret, esc) } - return path.Join(ret...) + return strings.Join(ret, "/") } func trailingPath( -- 2.44.0