ZIP条目覆盖,补充

2025-12-08 18:36:51 +08:00 · 2024-08-26 19:27:07 +08:00
parent e16b890a8d
commit fcb9b83896
1 changed files with 1 additions and 1 deletions
--- a/modules/boe-module-scorm/src/main/java/com/xboe/module/scorm/cam/load/ZipUtils.java
+++ b/modules/boe-module-scorm/src/main/java/com/xboe/module/scorm/cam/load/ZipUtils.java
@@ -60,7 +60,7 @@ public class ZipUtils {
    }

    public static boolean decompressZip(String zipFilePath, String saveFileDir) {
-        if (saveFileDir.contains("..")) {
+        if (zipFilePath.contains("..") || saveFileDir.contains("..")) {
            throw new SecurityException("输入路径包含不安全的字符");
        }