You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tika.apache.org by "Tim Allison (Jira)" <ji...@apache.org> on 2022/12/02 18:50:00 UTC
[jira] [Created] (TIKA-3942) Improve naming for embedded file structure paths
Tim Allison created TIKA-3942:
---------------------------------
Summary: Improve naming for embedded file structure paths
Key: TIKA-3942
URL: https://issues.apache.org/jira/browse/TIKA-3942
Project: Tika
Issue Type: Task
Reporter: Tim Allison
We currently rely on data in the container file or in the contained file for the internal path of an embedded file, e.g. /zip1.zip/zip2.zip/zip3.zip/something.txt
As a general rule, we should not trust user input, er files. I don't see any areas for malicious effects, but I can image a combination of events that could lead to name collisions.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)