temple/Suwayomi-Server
1
0
Fork 0
mirror of https://github.com/Suwayomi/Suwayomi-Server.git synced 2026-07-03 02:44:34 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Validate zipEntry directories during extension asset decompression (#1407)

Browse Source
This commit is contained in:
Edge At Zero
2025-05-27 08:45:20 +08:00
committed by GitHub
parent ec870759cf
commit d0f79ca473
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/src/main/kotlin/suwayomi/tachidesk/manga/impl/extension/Extension.kt
View File

@@ -240,7 +240,7 @@ object Extension {
ZipInputStream(apkFile.inputStream()).use { zipInputStream -> ZipInputStream(apkFile.inputStream()).use { zipInputStream ->
var zipEntry = zipInputStream.nextEntry var zipEntry = zipInputStream.nextEntry
while (zipEntry != null) { while (zipEntry != null) {
if (zipEntry.name.startsWith("assets/")) { if (zipEntry.name.startsWith("assets/") && !zipEntry.isDirectory) {
val assetFile = File(assetsFolder, zipEntry.name) val assetFile = File(assetsFolder, zipEntry.name)
assetFile.parentFile.mkdirs() assetFile.parentFile.mkdirs()
FileOutputStream(assetFile).use { outputStream -> FileOutputStream(assetFile).use { outputStream ->