de.hybris.platform.ruleengine.util

Class JarValidator

java.lang.Object

de.hybris.platform.ruleengine.util.JarValidator

public class JarValidator
extends java.lang.Object

The class provides some methods to check validity of jar files.

Method Summary

Modifier and Type	Method and Description
static void	validateZipSlipSecure(java.io.InputStream jarFileInputStream) Checks if the jar file is not malformed and thus is not zip slip vulnerable (doesn't have any entry name with traversal directory like "../file.dat")

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

validateZipSlipSecure

public static void validateZipSlipSecure(java.io.InputStream jarFileInputStream)
                                  throws java.io.IOException

Checks if the jar file is not malformed and thus is not zip slip vulnerable (doesn't have any entry name with traversal directory like "../file.dat")

Parameters:

jarFileInputStream - jar file InputStream to check

Throws:

java.io.IOException