Skip to content

Commit 9ac9347

Browse files
authored
[SECURITY] Fix Zip Slip Vulnerability (#1078)
1 parent 02ac038 commit 9ac9347

File tree

1 file changed

+3
-0
lines changed
  • playwright/src/test/java/com/microsoft/playwright

1 file changed

+3
-0
lines changed

playwright/src/test/java/com/microsoft/playwright/Utils.java

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,9 @@ static Map<String, byte[]> extractZip(Path zipPath, Path toDir) throws IOExcepti
114114
try (ZipInputStream zis = new ZipInputStream(new FileInputStream(zipPath.toFile()))) {
115115
for (ZipEntry zipEntry = zis.getNextEntry(); zipEntry != null; zipEntry = zis.getNextEntry()) {
116116
Path toPath = toDir.resolve(zipEntry.getName());
117+
if (!toPath.normalize().startsWith(toDir.normalize())) {
118+
throw new IOException("Bad zip entry");
119+
}
117120
if (zipEntry.isDirectory()) {
118121
Files.createDirectories(toPath);
119122
} else {

0 commit comments

Comments
 (0)