修复任意文件上传windows的&&DATA文件流安全问题

This commit is contained in:
zer0Black
2023-06-09 18:16:05 +08:00
parent cb90af443f
commit 9d2fc8dad7
4 changed files with 5 additions and 4 deletions
@@ -253,7 +253,8 @@ public class CommonUtils {
*/
public static boolean limitFileSuffix(String fileName,String[] fileSuffixLimits){
final List<String> fileNameList = Arrays.asList(fileSuffixLimits);
return fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).equals(name));
boolean isExists = fileNameList.stream().anyMatch(name -> fileName.substring(0,fileName.lastIndexOf('.')).contains(name)||fileName.substring(fileName.lastIndexOf('.')).contains(name));
return isExists;
}
/**
* RSA 使用私钥解密