IQSS / dataverse / #22411

push

github

Read zip file in try-with-resources (#10079)

* Read zip file in try-with-resources

* Prevent zip slip vulnerability

Sonarcloud warns strongly against blindly trusting paths in a zip file.
This first checks that the resolved path for an entry is in the
directory that we want it to be,
before trying to write the file.
If a path is outside `dataverseLangDirectory + "/"`, return HTTP 400

0 of 13 new or added lines in 1 file covered. (0.0%)

17230 of 83701 relevant lines covered (20.59%)

0.21 hits per line