mirror of
https://github.com/ZoneMinder/zoneminder.git
synced 2026-10-02 15:35:09 -04:00
fileSize() joined the stored DefaultVideo onto the event directory as is, so an older row, or one written before the model validation was added, holding ../ could stat a file outside it. fileExists() above already applies basename(); do the same here. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>