[jira] [Comment Edited] (WW-5501) Exclude malicious names

["Brian Andle (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WW-5501?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17911587#comment-17911587 ] 

Brian Andle edited comment on WW-5501 at 1/9/25 6:12 PM:
---------------------------------------------------------

Hi [~lukaszlenart] , this appears to break file names with a - in them. Such as *valid-plugin.xml* the following RegEx pattern is resulting in the exclusion.


{code:java}
\w+((\.\w+)|(\[\d+])|(\(\d+\))|(\['(\w-?|[\u4e00-\u9fa5]-?)+'])|(\('(\w-?|[\u4e00-\u9fa5]-?)+'\)))* {code}
!image-2025-01-09-10-11-17-169.png!


was (Author: JIRAUSER287474):
Hi [~lukaszlenart] , this appears to break file names with a - in them. Such as *valid-plugin.xml*

> Exclude malicious names
> -----------------------
>
>                 Key: WW-5501
>                 URL: https://issues.apache.org/jira/browse/WW-5501
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core
>            Reporter: Lukasz Lenart
>            Priority: Major
>             Fix For: 6.7.1, 7.0.1
>
>         Attachments: image-2025-01-09-10-11-17-169.png
>
>          Time Spent: 2h
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)