fr.gouv.vitam.common.security

Class SafeFileChecker

java.lang.Object

fr.gouv.vitam.common.security.SafeFileChecker

public class SafeFileChecker
extends Object

Checker for Sanity of file manipulation to avoid Path Traversal vulnerability

Author:

afraoucene

Method Summary

Modifier and Type	Method and Description
static void	checkSafeFilePath(String path) do an ESAPI path sanityCheck and prevent a path traversal attack
static void	checkSafeFilePath(String rootPath, String... subPaths) do an ESAPI path sanityCheck and prevent a path traversal attack

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

checkSafeFilePath

public static void checkSafeFilePath(String path)
                              throws IOException

do an ESAPI path sanityCheck and prevent a path traversal attack

Parameters:

path - full path representing a FileSystem resource

Throws:

IOException - thrown when any check fails with UnChecked or Runtime exception

checkSafeFilePath

public static void checkSafeFilePath(String rootPath,
                                     String... subPaths)
                              throws IOException

do an ESAPI path sanityCheck and prevent a path traversal attack

Parameters:

rootPath - first or initial part(s) of a path representing a FileSystem resource

subPaths - sub (additional) parts after root part(s) to be joined to rootPath parameter using File.separator FileSystem String

Throws:

IOException - thrown when any check fails with UnChecked or Runtime exception