Colm O hEigeartaigh created FELIX-6189:
------------------------------------------
Summary: Make sure jar/zip files are jailed to the destination
directory
Key: FELIX-6189
URL: https://issues.apache.org/jira/browse/FELIX-6189
Project: Felix
Issue Type: Improvement
Reporter: Colm O hEigeartaigh
There are a number of locations in Felix where we unzip a jar or zip file to
the filesystem, without checking that the all of the files are jailed to the
intended destination directory. This is a potential security issue as it allows
an attacked to overwrite files on the system outside of the intended directory.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
