Files
zoneminder/src
Isaac Connor 7e74e6ec50 fix: use only the filename part of event DefaultVideo in zms and zma
EventStream::loadEventData and zma both joined the DefaultVideo column
onto the event path and opened the result, so a DefaultVideo containing
../ made zms stream, or zma read and hard link, files outside the event
directory. Reduce it to std::filesystem::path::filename() when loading.

zma also wrote the value back into a new event's row with plain
string formatting; escape it with zmDbEscapeString.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
(cherry picked from commit 18f48f8bc95f53d0b21110f2f5e5a2c9d22c9a9b)
2026-09-24 23:16:11 -04:00
..
2013-03-17 00:45:21 +01:00
2024-10-26 14:29:40 -04:00
2024-10-26 14:29:40 -04:00
2021-05-30 21:41:58 +02:00
2026-01-29 18:50:42 -05:00
2024-10-29 13:30:29 -04:00
2025-02-26 21:04:32 +11:00
2025-02-26 21:04:32 +11:00
2023-01-18 16:01:42 -05:00
2025-07-05 08:09:09 -04:00
2026-01-05 16:36:36 -05:00
2026-01-05 16:36:36 -05:00