Merge pull request AdoptOpenJDK#882 from BulkSecurityGeneratorProject…

…V2/fix/JLL/partial-path-traversal-vulnerability Fix Partial Path Traversal Vulnerability
Cdevon2 · Nov 25, 2022 · 53f1322 · 53f1322
2 parents 83206bf + b09c6a4
commit 53f1322
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/common/src/main/java/net/adoptopenjdk/icedteaweb/io/FileUtils.java b/common/src/main/java/net/adoptopenjdk/icedteaweb/io/FileUtils.java
@@ -338,7 +338,7 @@ public static void recursiveDelete(File file, File base) throws IOException {
             return;
         }
 
-        if (!(file.getCanonicalPath().startsWith(base.getCanonicalPath()))) {
+        if (!(file.getCanonicalFile().toPath().startsWith(base.getCanonicalFile().toPath()))) {
             throw new IOException("Trying to delete a file outside Netx's basedir: "
                     + file.getCanonicalPath());
         }