路径遍历缺陷20

whycxzp

2023-10-20 9014fab377f33e61c938243e472e3136fb3d197b

路径遍历缺陷20

 src/main/java/com/whyc/service/BattInfService.java

@@ -562,6 +562,8 @@


    public Response getStationPic(String stationId){
        //过滤特殊字符,避免路径遍历攻击
        stationId = ActionUtil.filterFileName(stationId);
        String fileDirName = "";
        int configType = Integer.parseInt(environment.getProperty("configFile.type"));
        ApplicationHome applicationHome = new ApplicationHome(getClass());