Blame SOURCES/PreventiveleQueue.patch

94503d
commit 5437234c59f6c375a8ad0b07f93d459eefd571ba
94503d
Author: Jiri Vanek <jvanek@redhat.com>
94503d
Date:   Tue Jul 9 12:10:39 2019 +0200
94503d
94503d
    Preventively, hash also .. in queue
94503d
94503d
diff --git a/netx/net/sourceforge/jnlp/cache/CacheUtil.java b/netx/net/sourceforge/jnlp/cache/CacheUtil.java
94503d
index 5c8652b6..15e8865c 100644
94503d
--- a/netx/net/sourceforge/jnlp/cache/CacheUtil.java
94503d
+++ b/netx/net/sourceforge/jnlp/cache/CacheUtil.java
94503d
@@ -703,7 +703,11 @@ public class CacheUtil {
94503d
             path.append(File.separatorChar);
94503d
         }
94503d
         String locationPath = location.getPath().replace('/', File.separatorChar);
94503d
-        if (locationPath.contains("..")){
94503d
+        String query = "";
94503d
+        if (location.getQuery() != null) {
94503d
+            query = location.getQuery();
94503d
+        }
94503d
+        if (locationPath.contains("..") || query.contains("..")){
94503d
             try {
94503d
                 /**
94503d
                  * if path contains .. then it can harm lcoal system