Page History

...

Code Block

bgColor	#ccccff

String filename = /* provided by user */
Path filepath = new File(filename).toPath();
try {
  Path path = Paths.get( file);
  if (!isInSecureDir( path)) {
    System.out.println("File not in secure directory");
    return;
  }

  BasicFileAttributes attr = Files.readAttributes(
    path, BasicFileAttributes.class, LinkOption.NOFOLLOW_LINKS
  );

  // Check
  if (!attr.isRegularFile()) {
    System.out.println("Not a regular file");
    return;
  }
  // other necessary checks

  try (InputStream in = Files.newInputStream(filepath)) {
     // read file
  }
} catch (IOException x) {
  // handle error
}

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="047ca923b545feb9-69869ebf-40e44aa5-9608a3a0-703104ff596a6ebd4ce3e385"><ac:plain-text-body><![CDATA[	[[API 2006	AA. Bibliography#API 06]]	Class File, methods `createTempFile`, `delete`, `deleteOnExit`	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="aae01fb6320bfff1-c9063625-48c54af0-8b7885a6-7e16c00fc983070d77c717c1"><ac:plain-text-body><![CDATA[	[[CVE 2008	AA. Bibliography#CVE 08]]	[CVE-2008-5354	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="300075d2e717e1e8-3a85ca25-46924535-9758bd2e-c792de0dc0d4670ce72274d7"><ac:plain-text-body><![CDATA[	[[Darwin 2004	AA. Bibliography#Darwin 04]]	11.5 Creating a Transient File	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2c4c86c2dfa5c06d-c1168c1e-49d243f2-a8bb8d02-083ff6831520930de38c21b2"><ac:plain-text-body><![CDATA[	[[Garfinkel 1996	AA. Bibliography#Garfinkel 96]]	Section 5.6, "Device Files"	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="747bf26e534ac94a-55bc58a4-4d1a4b56-b82f9e2b-9c288b17deb2527961d3f006"><ac:plain-text-body><![CDATA[	[[Howard 2002	AA. Bibliography#Howard 02]]	Chapter 11, "Canonical Representation Issues"	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a3e8652028a77973-1475493b-4e594a8e-ae6b80ce-e392e7004e3c894b93f9da9f"><ac:plain-text-body><![CDATA[	[[J2SE 2011	AA. Bibliography#J2SE 11]]	The try-with-resources Statement	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="630c60d0e10ac3b8-fe9f286a-4b7e4276-a530ac73-6aab7029da625c10ca99547c"><ac:plain-text-body><![CDATA[	[[Open Group 2004	AA. Bibliography#Open Group 04]]	[`open()`	http://www.opengroup.org/onlinepubs/009695399/functions/open.html]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5f20b2314603905a-46416ae7-47d94660-8feda567-629fda9dc6f9563c5a43676e"><ac:plain-text-body><![CDATA[	[[SDN 2008	AA. Bibliography#SDN 08]]	Bug IDs: 4171239, 4405521, 4635827, 4631820	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2db9b1d32248d7de-8c28b78d-4bc84d15-84b384d8-e336fcc5edb404d838c0687e"><ac:plain-text-body><![CDATA[	[[Secunia 2008	AA. Bibliography#Secunia 08]]	[Secunia Advisory 20132	http://secunia.com/advisories/20132/]	]]></ac:plain-text-body></ac:structured-macro>

...

Space shortcuts

Page tree

Versions Compared

Old Version 55

New Version 56

Key