diff --git a/brut.j.util/src/main/java/brut/util/BrutIO.java b/brut.j.util/src/main/java/brut/util/BrutIO.java index 7de9ce86..b9a156fd 100644 --- a/brut.j.util/src/main/java/brut/util/BrutIO.java +++ b/brut.j.util/src/main/java/brut/util/BrutIO.java @@ -79,18 +79,18 @@ public class BrutIO { public static String sanitizeUnknownFile(final File directory, final String entry) throws IOException, BrutException { if (entry.length() == 0) { - throw new InvalidUnknownFileException("Invalid Unknown File - " + entry); + throw new InvalidUnknownFileException("Invalid Unknown File"); } if (new File(entry).isAbsolute()) { - throw new RootUnknownFileException("Absolute Unknown Files is not allowed - " + entry); + throw new RootUnknownFileException("Absolute Unknown Files is not allowed"); } final String canonicalDirPath = directory.getCanonicalPath() + File.separator; final String canonicalEntryPath = new File(directory, entry).getCanonicalPath(); if (!canonicalEntryPath.startsWith(canonicalDirPath)) { - throw new TraversalUnknownFileException("Directory Traversal is not allowed - " + entry); + throw new TraversalUnknownFileException("Directory Traversal is not allowed"); } // https://stackoverflow.com/q/2375903/455008