From bd918569ba89886d6852cfe07b59ab80f58be209 Mon Sep 17 00:00:00 2001
From: Kovid Goyal <kovid@kovidgoyal.net>
Date: Sun, 17 May 2026 21:48:52 +0530
Subject: [PATCH] Sanitize dir entry filenames

---
 kitty/dnd.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kitty/dnd.c b/kitty/dnd.c
index eae6cdeeb..089c92ce2 100644
--- a/kitty/dnd.c
+++ b/kitty/dnd.c
@@ -2043,6 +2043,9 @@ populate_dir_entries(Window *w, DragRemoteItem *ri) {
         if (len > 0) {
             char *name = strndup(ptr, len);
             if (!name) abrt(ENOMEM, "out of memory processing drag source item directory entries");
+            for (size_t i = 0; i < len; i++) if (name[i] == '/') name[i] = '_';
+            if (len == 1 && name[0] == '.') name[0] = '_';
+            if (len == 2 && name[0] == '.' && name[1] == '.') name[0] = '_';
             child->dir_entry_name = name;
         }
         ptr = p ? p + 1 : end;