{"version":"2.1.242","anchor":"file-history-restore-rejects-invalid-session-ids","canonical_anchor":"file-history-restore-rejects-invalid-session-ids","heading":"File-history restore rejects invalid session ids","tier":"notice","area":"File History","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242\/e\/file-history-restore-rejects-invalid-session-ids","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242","markdown":"### File-history restore rejects invalid session ids\n\nFile-history restore now rejects bad session ids instead of copying backups anywhere.\n\n**What**\n\nRestoring from file history now validates the target session id before copying backups. An invalid id logs a warning and aborts the copy, so a crafted id cannot steer backup files into a directory of someone else's choosing.\n\n**Evidence**\n\n`\"FileHistory: refusing to copy backups on restore (invalid target session id)\"`\n\n- Area: File History\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}