Security bug

diff --git a/apps/files_external/lib/sftp.php b/apps/files_external/lib/sftp.php
index f3605c3aa2d61cfa3c5f06955478607fc2e67d7f..2f62a0ecf83971d0e29c3b80099ecfb0c0d4a1c6 100644 (file)
--- a/apps/files_external/lib/sftp.php
+++ b/apps/files_external/lib/sftp.php
@@ -58,7 +58,7 @@ class SFTP extends OC\Files\Storage\Common {
        }
 
        private function abs_path($path) {
-               return $this->root . $path;
+               return $this->root . $this->cleanPath($path);
        }
 
        private function host_keys_path() {