scratchfoundation/scratchjr
1
0
Fork 0
mirror of https://github.com/scratchfoundation/scratchjr.git synced 2025-07-02 16:10:25 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

android: continue to SecurityException

Browse source
This commit is contained in:
Yueyu 2022-04-05 22:56:58 +09:00
parent 7dadc706d0
commit 56cc06bded
1 changed files with 1 additions and 1 deletions

2
android/ScratchJr/app/src/main/java/org/scratchjr/android/ScratchJrUtil.java
View file

@ -195,7 +195,7 @@ public class ScratchJrUtil {
// we need to confirm it will only extract to the expected folder. // we need to confirm it will only extract to the expected folder.
// For more details see https://support.google.com/faqs/answer/9294009 // For more details see https://support.google.com/faqs/answer/9294009
if (!unzipFile.getCanonicalPath().startsWith(toPath)) { if (!unzipFile.getCanonicalPath().startsWith(toPath)) {
continue; throw new SecurityException("Unsafe file path found and unzipping will not be allowed for security purposes.");
} }
if (ze.isDirectory()) { if (ze.isDirectory()) {
if(!unzipFile.isDirectory()) { if(!unzipFile.isDirectory()) {