update code

apache · Mar 4, 2024 · ac15d54 · ac15d54
1 parent 81b6ef0
commit ac15d54
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/bookkeeper-server/src/main/java/org/apache/bookkeeper/util/LocalBookKeeper.java b/bookkeeper-server/src/main/java/org/apache/bookkeeper/util/LocalBookKeeper.java
@@ -334,8 +334,11 @@ private static LocalBookKeeper getLocalBookiesInternal(ServerConfiguration conf,
      * @throws IOException
      */
     private void serializeLocalBookieConfig(ServerConfiguration localBookieConfig, String fileName) throws IOException {
-        if (StringUtils.isBlank(fileName) || !fileName.endsWith(".conf")) {
-            throw new IllegalArgumentException("File name should end with .conf");
+        if (StringUtils.isBlank(fileName)
+                || fileName.contains("..")
+                || fileName.contains("/")
+                || fileName.contains("\\")) {
+            throw new IllegalArgumentException("Invalid filename: " + fileName);
         }
 
         File localBookieConfFile = new File(localBookiesConfigDir, fileName);