From feefa546a9184350c6f87f189cb37e9cadb3e215 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Wed, 26 Aug 2026 20:30:08 +0000
Subject: [PATCH] fix: V-004 security vulnerability

Automated security fix generated by OrbisAI Security
---
 PainterNode/painter_node.py | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/PainterNode/painter_node.py b/PainterNode/painter_node.py
index 5790969..b7a38b6 100644
--- a/PainterNode/painter_node.py
+++ b/PainterNode/painter_node.py
@@ -37,8 +37,11 @@ PREFIX = "_setting.json"
 def isFileName(filename):
     if (
         not filename
-        and filename is not None
-        and (type(filename) == str and filename.strip() == "")
+        or not isinstance(filename, str)
+        or filename.strip() == ""
+        or "/" in filename
+        or "\\" in filename
+        or ".." in filename
     ):
         print("Filename is incorrect")
         return False