grobidOrg / grobid / 28536709255 / 1

39%

master: 39%

push

github

Fix ZipUtils flagged advisor from CodeQL (#1486)

- Resolve canonicalTempDir once and validate each entry’s canonical output path against it before any mkdir/write.
- Use try-with-resources for ZipFile and per-entry streams, and remove the redundant/unsafe double-write behavior.
- Make copyInputStream private and rely on callers to manage stream lifecycle via try-with-resources.

8678 of 24986 branches covered (34.73%)

Branch coverage included in aggregate %.

18496 of 45344 relevant lines covered (40.79%)

1.65 hits per line