Author: tilman
Date: Sun Mar 22 07:16:37 2026
New Revision: 1932443

Log:
PDFBOX-6180: improve directory boundary check, as suggested by Kaixuan Li; 
closes #427

Modified:
   
pdfbox/branches/3.0/examples/src/main/java/org/apache/pdfbox/examples/pdmodel/ExtractEmbeddedFiles.java

Modified: 
pdfbox/branches/3.0/examples/src/main/java/org/apache/pdfbox/examples/pdmodel/ExtractEmbeddedFiles.java
==============================================================================
--- 
pdfbox/branches/3.0/examples/src/main/java/org/apache/pdfbox/examples/pdmodel/ExtractEmbeddedFiles.java
     Sun Mar 22 04:20:03 2026        (r1932442)
+++ 
pdfbox/branches/3.0/examples/src/main/java/org/apache/pdfbox/examples/pdmodel/ExtractEmbeddedFiles.java
     Sun Mar 22 07:16:37 2026        (r1932443)
@@ -141,7 +141,9 @@ public final class ExtractEmbeddedFiles
     {
         File file = new File(directoryPath, filename);
         File parentDir = file.getParentFile();
-        if (!parentDir.getCanonicalPath().startsWith(directoryPath))
+        String parentCanonical = parentDir.getCanonicalPath();
+        if (!parentCanonical.equals(directoryPath) &&
+            !parentCanonical.startsWith(directoryPath + File.separator))
         {
             System.err.println("Ignoring " + filename + " (different 
directory)");
             return;

Reply via email to