scratchfoundation/scratchjr
1
0
Fork 0
mirror of https://github.com/scratchfoundation/scratchjr.git synced 2025-06-10 20:20:57 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

android: continue to SecurityException

Browse source
This commit is contained in:
Yueyu 2022-04-05 22:56:58 +09:00
parent 7dadc706d0
commit 56cc06bded
1 changed files with 1 additions and 1 deletions

2
android/ScratchJr/app/src/main/java/org/scratchjr/android/ScratchJrUtil.java
View file

@ -195,7 +195,7 @@ public class ScratchJrUtil {
// we need to confirm it will only extract to the expected folder.
// For more details see https://support.google.com/faqs/answer/9294009
if (!unzipFile.getCanonicalPath().startsWith(toPath)) {
continue;
throw new SecurityException("Unsafe file path found and unzipping will not be allowed for security purposes.");
}
if (ze.isDirectory()) {
if(!unzipFile.isDirectory()) {