#4133 Backfit of : Prevent use of .. or : in file path #3552 (#4138)

MarimerLLC · Aug 6, 2024 · 445bc60 · 445bc60
1 parent e4855c6
commit 445bc60
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/Source/Csla.Shared/Reflection/MethodCaller.cs b/Source/Csla.Shared/Reflection/MethodCaller.cs
@@ -234,7 +234,11 @@ public static Type GetType(string typeName, bool throwOnError, bool ignoreCase)
         string[] splitName = typeName.Split(',');
         if (splitName.Length > 2)
         {
-          var asm = AssemblyLoadContext.Default.LoadFromAssemblyPath(AppContext.BaseDirectory + splitName[1].Trim() + ".dll");
+          var path = AppContext.BaseDirectory + splitName[1].Trim() + ".dll";
+          if (path.Contains("..") || path.Contains(':'))
+            throw new TypeLoadException(path);
+
+          var asm = AssemblyLoadContext.Default.LoadFromAssemblyPath(path);
           return asm.GetType(splitName[0].Trim());
         }
         else