From a1cc5501c4b998223df1b2bc4b349f24e86c07ff Mon Sep 17 00:00:00 2001 From: David Jorm Date: Wed, 1 Apr 2015 18:03:02 -0700 Subject: [PATCH] Improved filename sanitization --- .../main/java/org/apache/activemq/util/FilenameGuardFilter.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/activemq-fileserver/src/main/java/org/apache/activemq/util/FilenameGuardFilter.java b/activemq-fileserver/src/main/java/org/apache/activemq/util/FilenameGuardFilter.java index 099fa414a25..89bfa58cb78 100644 --- a/activemq-fileserver/src/main/java/org/apache/activemq/util/FilenameGuardFilter.java +++ b/activemq-fileserver/src/main/java/org/apache/activemq/util/FilenameGuardFilter.java @@ -60,7 +60,7 @@ public GuardedHttpServletRequest(HttpServletRequest httpRequest) { } private String guard(String filename) { - String guarded = filename.replace(":", "_"); + String guarded = filename.replace(":", "_").replace("\\", "").replace("/", ""); if (LOG.isDebugEnabled()) { LOG.debug("guarded " + filename + " to " + guarded); }