Patch-Magento2-Framework-directoryResolver-validatePath.patch

--- a/App/Filesystem/DirectoryResolver.php
+++ b/App/Filesystem/DirectoryResolver.php
@@ -3,8 +3,10 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
 namespace Magento\Framework\App\Filesystem;
-
+use Magento\Framework\Filesystem;
+use Magento\Framework\App\ObjectManager;
 /**
  * Magento directories resolver.
  */
@@ -14,15 +16,20 @@ class DirectoryResolver
      * @var DirectoryList
      */
     private $directoryList;
-
+    /**
+     * @var \Magento\Framework\Filesystem
+     */
+    private $filesystem;
     /**
      * @param DirectoryList $directoryList
+     * @param Filesystem|null $filesystem
+     * @throws \RuntimeException
      */
-    public function __construct(DirectoryList $directoryList)
+    public function __construct(DirectoryList $directoryList, Filesystem $filesystem = null)
     {
         $this->directoryList = $directoryList;
+        $this->filesystem = $filesystem ?: ObjectManager::getInstance()->get(Filesystem::class);
     }
-
     /**
      * Validate path.
      *
@@ -38,9 +45,10 @@ class DirectoryResolver
      */
     public function validatePath($path, $directoryConfig = DirectoryList::MEDIA)
     {
-        $realPath = realpath($path);
+        $directory = $this->filesystem->getDirectoryWrite($directoryConfig);
+        $realPath = $directory->getDriver()->getRealPathSafety($path);
         $root = $this->directoryList->getPath($directoryConfig);
-
+        
         return strpos($realPath, $root) === 0;
     }
-}
+}
\ No newline at end of file