rooty/Arduino
1
0
Fork 0
mirror of https://github.com/arduino/Arduino.git synced 2025-02-20 14:54:31 +01:00
Code Issues Releases Activity

Even stricter sanity checks

Browse Source
This commit is contained in:
Cristian Maglie 2020-01-21 12:32:51 +01:00 committed by Cristian Maglie
parent b811689e97
commit 113c56d657
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
arduino-core/src/cc/arduino/contributions/DownloadableContributionsDownloader.java
View File

@ -64,7 +64,10 @@ public class DownloadableContributionsDownloader {
URL url = new URL(contribution.getUrl());
// Filter out paths from file name
String filename = new File(contribution.getArchiveFileName()).getName();
Path outputFile = Paths.get(stagingFolder.getAbsolutePath(), filename);
Path outputFile = Paths.get(stagingFolder.getAbsolutePath(), filename).normalize();
if (outputFile.toFile().isDirectory()) {
throw new Exception(format("Can't download {0}: invalid filename or exinsting directory", contribution.getArchiveFileName()));
}
// Ensure the existence of staging folder
Files.createDirectories(stagingFolder.toPath());