Allow two periods in file paths

Unidata · Sep 20, 2024 · 9fcfcbe · 9fcfcbe
1 parent ae751d3
commit 9fcfcbe
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tds/src/main/java/thredds/util/TdsPathUtils.java b/tds/src/main/java/thredds/util/TdsPathUtils.java
@@ -42,8 +42,8 @@ public static String extractPath(HttpServletRequest req, String removePrefix) {
     if (dataPath.startsWith("/"))
       dataPath = dataPath.substring(1);
 
-    if (dataPath.contains("..")) // LOOK what about escapes ??
-      throw new IllegalArgumentException("path cannot contain '..'");
+    if (dataPath.contains("../")) // LOOK what about escapes ??
+      throw new IllegalArgumentException("path cannot contain '../'");
 
     return dataPath;
   }