Merge pull request #153 from kiegroup/main-sync-20260308

[main-sync-20260308] 🤖 Sync main with upstream

Author: mareknovotny

build-parent/pom.xml

@@ -223,7 +223,6 @@
     <version.archunit.junit5>1.4.0</version.archunit.junit5>
 
     <version.io.vertx>4.5.23</version.io.vertx>
-    <version.at.yawk.lz4.java>1.10.1</version.at.yawk.lz4.java>
   </properties>
 
   <dependencyManagement>
@@ -234,11 +233,6 @@
         <artifactId>vertx-web</artifactId>
         <version>${version.io.vertx}</version>
       </dependency>
-      <dependency>
-        <groupId>at.yawk.lz4</groupId>
-        <artifactId>lz4-java</artifactId>
-        <version>${version.at.yawk.lz4.java}</version>
-      </dependency>
       <!-- Version overrides to fix vulnerabilities - end -->
 
       <!-- Keep in sync with groupId org.slf4j -->

kie-maven-plugin/src/main/java/org/kie/maven/plugin/DiskResourceStore.java

@@ -18,14 +18,14 @@
  */
 package org.kie.maven.plugin;
 
+import org.drools.util.PathUtils;
 import org.drools.util.PortablePath;
 import org.kie.memorycompiler.resources.ResourceStore;
 
 import java.io.File;
 import java.io.IOException;
 import java.nio.file.Files;
 import java.nio.file.Path;
-import java.nio.file.Paths;
 
 public class DiskResourceStore implements ResourceStore {
 
@@ -77,7 +77,7 @@ public void remove(String pResourceName) {
 
     private void commonWrite(String fullPath, byte[] pResourceData, boolean createFolder) {
         try {
-            final Path path = Paths.get(fullPath).normalize();
+            final Path path = PathUtils.getSecuredPath(root.toPath(), fullPath);
             if (createFolder) {
                 final Path parentPath = path.getParent();
                 if (parentPath != null) {
@@ -92,15 +92,17 @@ private void commonWrite(String fullPath, byte[] pResourceData, boolean createFo
 
     private byte[] commonRead(String fullPath) {
         try {
-            return Files.readAllBytes(Paths.get(fullPath).normalize());
+            final Path path = PathUtils.getSecuredPath(root.toPath(), fullPath);
+            return Files.readAllBytes(path);
         } catch (IOException e) {
             throw new RuntimeException(e);
         }
     }
 
     private void commonRemove(String fullPath) {
         try {
-            Files.deleteIfExists(Paths.get(fullPath).normalize());
+            final Path path = PathUtils.getSecuredPath(root.toPath(), fullPath);
+            Files.deleteIfExists(path);
         } catch (IOException e) {
             throw new RuntimeException(e);
         }