mirrors/Tachidesk
1
0
Fork 0
mirror of https://github.com/Suwayomi/Tachidesk.git synced 2026-01-06 03:42:34 +01:00
Code Issues Projects Releases Wiki Activity

Fix: Validate zipEntry directories during extension asset decompression (#1407)

Browse Source
This commit is contained in:
Edge At Zero
2025-05-27 08:45:20 +08:00
committed by GitHub
parent ec870759cf
commit d0f79ca473
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/src/main/kotlin/suwayomi/tachidesk/manga/impl/extension/Extension.kt
View File

@@ -240,7 +240,7 @@ object Extension {
ZipInputStream(apkFile.inputStream()).use { zipInputStream ->
var zipEntry = zipInputStream.nextEntry
while (zipEntry != null) {
if (zipEntry.name.startsWith("assets/")) {
if (zipEntry.name.startsWith("assets/") && !zipEntry.isDirectory) {
val assetFile = File(assetsFolder, zipEntry.name)
assetFile.parentFile.mkdirs()
FileOutputStream(assetFile).use { outputStream ->