From f412af4de0c60179479fb17f38e504dd3d5fdffc Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Thu, 9 Jul 2020 15:48:48 -0700
Subject: [PATCH] Fixed plugin path check.

---
 pluginHandler.js | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/pluginHandler.js b/pluginHandler.js
index 49246a5a..03f1e91d 100644
--- a/pluginHandler.js
+++ b/pluginHandler.js
@@ -518,8 +518,6 @@ module.exports.pluginHandler = function (parent) {
     obj.handleAdminReq = function (req, res, user, serv) {
         if ((req.query.pin == null) || (obj.common.isAlphaNumeric(req.query.pin) !== true)) { res.sendStatus(401); return; }
         var path = obj.path.join(obj.pluginPath, req.query.pin, 'views');
-        // path isn't a filename, it is a folder path
-        //if (obj.common.IsFilenameValid(path) !== true) { res.sendStatus(401); return; }
         serv.app.set('views', path);
         if ((obj.plugins[req.query.pin] != null) && (typeof obj.plugins[req.query.pin].handleAdminReq == 'function')) {
             obj.plugins[req.query.pin].handleAdminReq(req, res, user);
@@ -531,8 +529,6 @@ module.exports.pluginHandler = function (parent) {
     obj.handleAdminPostReq = function (req, res, user, serv) {
         if ((req.query.pin == null) || (obj.common.isAlphaNumeric(req.query.pin) !== true)) { res.sendStatus(401); return; }
         var path = obj.path.join(obj.pluginPath, req.query.pin, 'views');
-        // path isn't a filename, it is a folder path
-        //if (obj.common.IsFilenameValid(path) !== true) { res.sendStatus(401); return; }
         serv.app.set('views', path);
         if ((obj.plugins[req.query.pin] != null) && (typeof obj.plugins[req.query.pin].handleAdminPostReq == 'function')) {
             obj.plugins[req.query.pin].handleAdminPostReq(req, res, user);