fix: tighten up detectPossibleDirectoryTraversal for Windows
This commit is contained in:
parent
841db5061a
commit
1b1c7f8f50
|
@ -95,10 +95,7 @@ public class BrutIO {
|
|||
}
|
||||
|
||||
public static boolean detectPossibleDirectoryTraversal(String entry) {
|
||||
if (OSDetection.isWindows()) {
|
||||
return entry.contains("..\\") || entry.contains("\\..");
|
||||
}
|
||||
return entry.contains("../") || entry.contains("/..");
|
||||
return entry.contains("../") || entry.contains("/..") || entry.contains("..\\") || entry.contains("\\..");
|
||||
}
|
||||
|
||||
public static String adaptSeparatorToUnix(String path) {
|
||||
|
|
Loading…
Reference in New Issue