Improve path validation for Custom Script notifications

src/NzbDrone.Core/Notifications/CustomScript/CustomScript.cs

@@ -5,6 +5,7 @@ using System.Linq;
 using FluentValidation.Results;
 using NLog;
 using NzbDrone.Common.Disk;
+using NzbDrone.Common.Extensions;
 using NzbDrone.Common.Processes;
 using NzbDrone.Common.Serializer;
 using NzbDrone.Core.Music;
@@ -176,6 +177,16 @@ namespace NzbDrone.Core.Notifications.CustomScript
                 failures.Add(new NzbDroneValidationFailure("Path", "File does not exist"));
             }
 
+            foreach (var systemFolder in SystemFolders.GetSystemFolders())
+            {
+                if (systemFolder.IsParentPath(Settings.Path))
+                {
+                    failures.Add(new NzbDroneValidationFailure("Path", $"Must not be a descendant of '{systemFolder}'"));
+                }
+            }
+
+            if (failures.Empty())
+            {
                 try
                 {
                     var environmentVariables = new StringDictionary();
@@ -193,6 +204,7 @@ namespace NzbDrone.Core.Notifications.CustomScript
                     _logger.Error(ex);
                     failures.Add(new NzbDroneValidationFailure(string.Empty, ex.Message));
                 }
+            }
 
             return new ValidationResult(failures);
         }