diff --git a/src/main/java/com/seleniumtests/helper/FileUtility.java b/src/main/java/com/seleniumtests/helper/FileUtility.java index b33c6a8..b11ff87 100644 --- a/src/main/java/com/seleniumtests/helper/FileUtility.java +++ b/src/main/java/com/seleniumtests/helper/FileUtility.java @@ -62,6 +62,9 @@ public static void extractJar(final String storeLocation, final Class clz) th ZipEntry entry = (ZipEntry) jarFiles.nextElement(); String currentEntry = entry.getName(); File destinationFile = new File(storeLocation, currentEntry); + if (!destinationFile.toPath().normalize().startsWith(storeLocation)) { + throw new IOException("Bad zip entry"); + } File destinationParent = destinationFile.getParentFile(); // create the parent directory structure if required