inteligr8/alfresco-transform-core
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-transform-core.git synced 2026-09-16 18:12:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

[ACS-11995] fix codeql path and command injection (#1292)

Browse Source
This commit is contained in:
tathagta15
2026-06-18 15:25:41 +05:30
committed by GitHub
parent 7fa5897a87
commit 774e4cfcb3
3 changed files with 58 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deprecated/alfresco-transformer-base/src/test/java/org/alfresco/transformer/AbstractMetadataExtractsIT.java
+4
View File
@@ -120,6 +120,10 @@ public abstract class AbstractMetadataExtractsIT
private Map<String, Serializable> readExpectedMetadata(String filename, File actualMetadataFile) throws IOException
{
if (filename.contains("..") || filename.contains("/") || filename.contains("\\"))
{
throw new IllegalArgumentException("Invalid expected metadata filename: " + filename);
}
try (InputStream inputStream = this.getClass().getClassLoader().getResourceAsStream(filename))
{
if (inputStream == null)