Class JarValidator
java.lang.Object
de.hybris.platform.ruleengine.util.JarValidator
The class provides some methods to check validity of jar files.
-
Method Summary
Modifier and TypeMethodDescriptionstatic voidvalidateZipSlipSecure(InputStream jarFileInputStream) Checks if the jar file is not malformed and thus is not zip slip vulnerable (doesn't have any entry name with traversal directory like "../file.dat")
-
Method Details
-
validateZipSlipSecure
Checks if the jar file is not malformed and thus is not zip slip vulnerable (doesn't have any entry name with traversal directory like "../file.dat")- Parameters:
jarFileInputStream- jar fileInputStreamto check- Throws:
IOException
-