You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tika.apache.org by "Tim Allison (Jira)" <ji...@apache.org> on 2022/12/02 22:03:00 UTC

[jira] [Resolved] (TIKA-3942) Improve naming for embedded file structure paths

     [ https://issues.apache.org/jira/browse/TIKA-3942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tim Allison resolved TIKA-3942.
-------------------------------
    Fix Version/s: 2.6.1
       Resolution: Fixed

> Improve naming for embedded file structure paths
> ------------------------------------------------
>
>                 Key: TIKA-3942
>                 URL: https://issues.apache.org/jira/browse/TIKA-3942
>             Project: Tika
>          Issue Type: Task
>            Reporter: Tim Allison
>            Priority: Minor
>             Fix For: 2.6.1
>
>
> We currently rely on data in the container file or in the contained file for the internal path of an embedded file, e.g. /zip1.zip/zip2.zip/zip3.zip/something.txt 
>  
> As a general rule, we should not trust user input, er files.  I don't see any areas for malicious effects, but I can image a combination of events that could lead to path collisions. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)