路径遍历缺陷18

whycxzp

2023-10-20 bd9af4f9f9f574c1bab6613449ca678a6522d70a

路径遍历缺陷18

 src/main/java/com/whyc/controller/LicenseController.java

@@ -177,6 +177,8 @@

    //将pri_key.ksm。pub_key.ksm文件拷贝至ksm文件下然后读取fileName:/config/pri_key.ksm
    public static String getRealPath(String fileName){
        //过滤特殊字符,避免路径遍历攻击
        fileName = ActionUtil.filterFileName(fileName);
        ClassPathResource classPathResource = new ClassPathResource("/config/"+fileName);
        InputStream inputStream_pub = null;
        ApplicationHome applicationHome = new ApplicationHome(LicenseController.class);
@@ -200,6 +202,8 @@
        return fileDirName;
    }
    public static void createFile(String pathName) {
        //过滤特殊字符,避免路径遍历攻击
        pathName = ActionUtil.filterFileName(pathName);
        File dir = new File(pathName);
        if (!dir.exists()) {// 判断目录是否存在
            dir.mkdir();