[Bug] Path Traversal Vulnerability in RecordManager.LoadFile / RecordManager.LoadFile 中的路径遍历漏洞

[SunYanbox]

Path Traversal Vulnerability in RecordManager.LoadFile / RecordManager.LoadFile 中的路径遍历漏洞

LoadFile method does not properly validate file paths, allowing potential arbitrary file read attacks. / LoadFile 方法未对文件路径进行严格验证，可能导致任意文件读取攻击。

Location: RecordManager.cs:95-215
Vulnerability Type: Path Traversal (CWE-22)
Description: The LoadFile method accepts user-provided file paths without proper validation. An attacker could use path traversal sequences (../) to read files outside the intended directory.
Impact: Unauthorized access to sensitive configuration files; Potential exposure of system files; Information disclosure.
Fix Recommendation: 1. Implement path normalization using Path.GetFullPath(); 2. Verify the resolved path is within the allowed directory; 3. Use a whitelist approach for allowed file extensions; 4. Add logging for suspicious path attempts.

位置：RecordManager.cs:95-215 行
漏洞类型：路径遍历 (CWE-22)
描述：LoadFile 方法接受用户提供的文件路径而没有进行适当的验证。攻击者可以使用路径遍历序列（../）读取预期目录之外的文件。
影响：未授权访问敏感配置文件；系统文件可能暴露；信息泄露。
修复建议：1. 使用 Path.GetFullPath() 实现路径规范化；2. 验证解析后的路径是否在允许的目录内；3. 对允许的文件扩展名使用白名单方法；4. 添加可疑路径尝试的日志记录。

Discovered by Qwen Coder, this issue was organized by Deepseek.

由Qwen Coder发现，由Deepseek整理此issue

[SunYanbox]

The code only checks whether _recordDbPath is null, but does not verify whether the passed file path is actually under the _recordDbPath directory.

代码只检查了_recordDbPath是否为 null，但没有验证传入的file路径是否真的在_recordDbPath目录下。