Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java

smehta23 · JLLeitschuh · web-flow · commit 391dd5b38d29 · 2022-07-01T10:55:58.000-04:00
Co-authored-by: Jonathan Leitschuh &lt;jonathan.leitschuh@gmail.com&gt;
diff --git a/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java b/java/ql/src/Security/CWE/CWE-023/PartialPathTraversalGood.java
@@ -2,7 +2,7 @@
 
 public class PartialPathTraversalGood {
     public void example(File dir, File parent) throws IOException {
-        if (!dir.getCanonicalPath().startsWith(parent.getCanonicalPath().toPath())) {
+        if (!dir.getCanonicalPath().toPath().startsWith(parent.getCanonicalPath().toPath())) {
             throw new IOException("Invalid directory: " + dir.getCanonicalPath());
         }
     }

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`
`3`	`3`	`public class PartialPathTraversalGood {`
`4`	`4`	`public void example(File dir, File parent) throws IOException {`
`5`		`- if (!dir.getCanonicalPath().startsWith(parent.getCanonicalPath().toPath())) {`
	`5`	`+ if (!dir.getCanonicalPath().toPath().startsWith(parent.getCanonicalPath().toPath())) {`
`6`	`6`	`throw new IOException("Invalid directory: " + dir.getCanonicalPath());`
`7`	`7`	`}`
`8`	`8`	`}`