diff --git a/internal/service/file.go b/internal/service/file.go index 17554b05..ed8ba967 100644 --- a/internal/service/file.go +++ b/internal/service/file.go @@ -217,7 +217,7 @@ func (s *FileService) Move(w http.ResponseWriter, r *http.Request) { continue } - if io.IsDir(item.Source) && strings.HasPrefix(item.Target, item.Source) { + if io.IsDir(item.Source) && strings.HasPrefix(item.Target, item.Source+"/") { Error(w, http.StatusForbidden, s.t.Get("please don't do this")) return }