From 49a167540f5f0e23dd872aeaab798a234976208c Mon Sep 17 00:00:00 2001 From: Connor Tumbleson Date: Thu, 10 Dec 2020 07:57:00 -0500 Subject: [PATCH] fix: cut down length of zipslip exceptions --- brut.j.util/src/main/java/brut/util/BrutIO.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/brut.j.util/src/main/java/brut/util/BrutIO.java b/brut.j.util/src/main/java/brut/util/BrutIO.java index 7de9ce86..b9a156fd 100644 --- a/brut.j.util/src/main/java/brut/util/BrutIO.java +++ b/brut.j.util/src/main/java/brut/util/BrutIO.java @@ -79,18 +79,18 @@ public class BrutIO { public static String sanitizeUnknownFile(final File directory, final String entry) throws IOException, BrutException { if (entry.length() == 0) { - throw new InvalidUnknownFileException("Invalid Unknown File - " + entry); + throw new InvalidUnknownFileException("Invalid Unknown File"); } if (new File(entry).isAbsolute()) { - throw new RootUnknownFileException("Absolute Unknown Files is not allowed - " + entry); + throw new RootUnknownFileException("Absolute Unknown Files is not allowed"); } final String canonicalDirPath = directory.getCanonicalPath() + File.separator; final String canonicalEntryPath = new File(directory, entry).getCanonicalPath(); if (!canonicalEntryPath.startsWith(canonicalDirPath)) { - throw new TraversalUnknownFileException("Directory Traversal is not allowed - " + entry); + throw new TraversalUnknownFileException("Directory Traversal is not allowed"); } // https://stackoverflow.com/q/2375903/455008