From 6283287bee907372998e67f38f9628933a9a3a0e Mon Sep 17 00:00:00 2001
From: Zlatin Balevsky <zlatinb@gmail.com>
Date: Sun, 22 Dec 2019 22:17:57 +0000
Subject: [PATCH] prevent empty input from sharing the I2P working dir

---
 webui/src/main/java/com/muwire/webui/FilesServlet.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webui/src/main/java/com/muwire/webui/FilesServlet.java b/webui/src/main/java/com/muwire/webui/FilesServlet.java
index 5f037fd9..eab98ad9 100644
--- a/webui/src/main/java/com/muwire/webui/FilesServlet.java
+++ b/webui/src/main/java/com/muwire/webui/FilesServlet.java
@@ -143,7 +143,7 @@ public class FilesServlet extends HttpServlet {
         }
         if (action.equals("share")) {
             String file = req.getParameter("file");
-            if (file == null) {
+            if (file == null || file.trim().length() == 0) {
                 resp.sendError(403, "Bad param");
                 return;
             }