starred/pkl
1
0
Fork 0
mirror of https://github.com/apple/pkl.git synced 2026-04-11 03:06:55 +02:00
Code Issues 198 Packages Projects Releases 10 Wiki Activity

Correct --root-dir check to also work for jar:file: URIs (#1442)

Browse Source
This commit is contained in:
Jen Basch
2026-02-25 10:57:01 -08:00
committed by GitHub
parent be21c34938
commit 3ef065b6b6
2 changed files with 61 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
pkl-core/src/main/java/org/pkl/core/SecurityManagers.java
View File

@@ -24,6 +24,7 @@ import java.util.*;
import java.util.function.Function;
import java.util.regex.Pattern;
import org.pkl.core.util.ErrorMessages;
import org.pkl.core.util.IoUtils;
import org.pkl.core.util.Nullable;
/** A provider for {@link SecurityManager}s. */
@@ -213,13 +214,17 @@ public final class SecurityManagers {
}
private void checkIsUnderRootDir(URI uri, boolean isResource) throws SecurityManagerException {
if (!uri.isAbsolute()) {
throw new AssertionError("Expected absolute URI but got: " + uri);
// handle jar:file: URIs correctly:
var checkUri =
uri.getScheme().equals("jar") ? IoUtils.createUri(uri.getSchemeSpecificPart()) : uri;
if (!checkUri.isAbsolute()) {
throw new AssertionError("Expected absolute URI but got: " + checkUri);
}
if (rootDir == null || !uri.getScheme().equals("file")) return;
if (rootDir == null || !checkUri.getScheme().equals("file")) return;
var path = Path.of(uri);
var path = Path.of(checkUri);
if (Files.exists(path)) {
try {
path = path.toRealPath();