Fix - Add fix after rebase

combust · Sep 10, 2023 · 3ac9b11 · 3ac9b11
1 parent 1b2cd81
commit 3ac9b11
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/bundle-ml/src/main/scala/ml/combust/bundle/util/FileUtil.scala b/bundle-ml/src/main/scala/ml/combust/bundle/util/FileUtil.scala
@@ -70,6 +70,10 @@ object FileUtil {
       if (entry.isDirectory) {
         Files.createDirectories(filePath)
       } else {
+        val destCanonical = dest.getCanonicalPath()
+        if (!filePath.getCanonicalPath().startsWith(destCanonical + File.separator)) {
+          throw new Exception("Entry is outside of the target dir: " + entry.getName)
+        }
         Using(Files.newOutputStream(filePath)) {
           out => writeData(in, out)
         }