From a1027d4499cfad752d6c449b407bb1f8dc4e16d2 Mon Sep 17 00:00:00 2001 From: ulrich Date: Mon, 04 Nov 2024 12:29:52 +0000 Subject: [PATCH] inspectFileName angepasst --- src/de/uhilger/neon/HttpHelper.java | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/de/uhilger/neon/HttpHelper.java b/src/de/uhilger/neon/HttpHelper.java index f76cfa2..c2485d8 100644 --- a/src/de/uhilger/neon/HttpHelper.java +++ b/src/de/uhilger/neon/HttpHelper.java @@ -61,14 +61,14 @@ public String getFileName(HttpExchange e) throws IllegalArgumentException { String ctxPath = e.getHttpContext().getPath(); String uriPath = e.getRequestURI().getPath(); - return fixFileName(uriPath.substring(ctxPath.length())); + return inspectFileName(uriPath.substring(ctxPath.length())); } - public String fixFileName(String fileName) throws IllegalArgumentException { + public String inspectFileName(String fileName) throws IllegalArgumentException { if (fileName == null - || fileName.contains("..") - || fileName.contains("/") - || fileName.contains("\\")) { + || fileName.contains("..")) { + //|| fileName.contains("/") + //|| fileName.contains("\\")) { throw new IllegalArgumentException("Invalid file name"); } return fileName; -- Gitblit v1.9.3