Class JarValidator

java.lang.Object
de.hybris.platform.ruleengine.util.JarValidator

public class JarValidator extends Object
The class provides some methods to check validity of jar files.
  • Method Details

    • validateZipSlipSecure

      public static void validateZipSlipSecure(InputStream jarFileInputStream) throws IOException
      Checks if the jar file is not malformed and thus is not zip slip vulnerable (doesn't have any entry name with traversal directory like "../file.dat")
      Parameters:
      jarFileInputStream - jar file InputStream to check
      Throws:
      IOException