Fix path traversal on mod upload

Fix possibility of a maliciously crafted mod being written outside of
the mods directory and thus possibily overwriting unrelated files.

packages/controller/src/routes.ts

@@ -559,6 +559,7 @@ async function uploadMod(req: Request, res: Response) {
 			await finished(writeStream);
 
 			const modInfo = await lib.ModInfo.fromModFile(path.join(modsDirectory, tempFilename));
+			checkModName(modInfo.filename);
 			await fs.rename(path.join(modsDirectory, tempFilename), path.join(modsDirectory, modInfo.filename));
 			req.app.locals.controller.mods.set(modInfo.filename, modInfo);
 			req.app.locals.controller.modUpdated(modInfo);