From b4fa193d2da5b06a07e2a962ebdf0153cebe895b Mon Sep 17 00:00:00 2001
From: Nystik <236107-Nystik@users.noreply.gitlab.com>
Date: Sat, 4 Apr 2026 00:37:15 +0200
Subject: [PATCH] fix bug in vault resolve

---
 server/routes/fs.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/server/routes/fs.js b/server/routes/fs.js
index 1cccf3d..27dc73b 100644
--- a/server/routes/fs.js
+++ b/server/routes/fs.js
@@ -72,7 +72,9 @@ function resolveVaultPath(vaultRoot, relativePath) {
   const cleaned = (relativePath || "").replace(/^\/+/, "");
   const resolved = path.resolve(vaultRoot, cleaned);
 
-  if (!resolved.startsWith(path.resolve(vaultRoot))) {
+  const resolvedRoot = path.resolve(vaultRoot);
+
+  if (resolved !== resolvedRoot && !resolved.startsWith(resolvedRoot + path.sep)) {
     return null;
   }
   return resolved;