Re: JDK-8355338: ZIP and non-compliant entry names

2025-04-23 Thread Lars Bruun-Hansen
Agreed, too early.  No need to make it more complex: Suggestion: - First phase: put some notes in Javadoc about this. I'll be happy to suggest / draft a PR. Adding to javadoc should be uncontroversial and immediately implementable. Right? - Second phase:  More thorough analysis: How can the JD

Re: JDK-8355338: ZIP and non-compliant entry names

2025-04-23 Thread Alan Bateman
On 23/04/2025 09:24, Lars Bruun-Hansen wrote: : There is also a security angle: Spoofing file names in ZIP files is a common technique. Some implementations takes cautionary steps on this. For example, the Windows Explorer's ZIP reader simply will not show entries which start with ".." or ".". W