org.fao.geonet.utils.FilePathChecker.java Source code

Introduction

Here is the source code for org.fao.geonet.utils.FilePathChecker.java

Source

//=============================================================================
//===   Copyright (C) 2001-2005 Food and Agriculture Organization of the
//===   United Nations (FAO-UN), United Nations World Food Programme (WFP)
//===   and United Nations Environment Programme (UNEP)
//===
//===   This library is free software; you can redistribute it and/or
//===   modify it under the terms of the GNU Lesser General Public
//===   License as published by the Free Software Foundation; either
//===   version 2.1 of the License, or (at your option) any later version.
//===
//===   This library is distributed in the hope that it will be useful,
//===   but WITHOUT ANY WARRANTY; without even the implied warranty of
//===   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
//===   Lesser General Public License for more details.
//===
//===   You should have received a copy of the GNU Lesser General Public
//===   License along with this library; if not, write to the Free Software
//===   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
//===
//===   Contact: Jeroen Ticheler - FAO - Viale delle Terme di Caracalla 2,
//===   Rome - Italy. email: GeoNetwork@fao.org
//==============================================================================

package org.fao.geonet.utils;

import org.apache.commons.lang.StringUtils;
import org.fao.geonet.exceptions.BadParameterEx;

import java.nio.file.Path;
import java.nio.file.Paths;

/**
 * Utility class to validate a file path.
 *
 * @author josegar
 */
public class FilePathChecker {

    /**
     * Checks that a file path is not absolute path and doesn't have .. characters, throwing an exception
     * in these cases.
     *
     * @param filePath
     * @throws Exception
     */
    public static void verify(String filePath) throws BadParameterEx {
        if (StringUtils.isEmpty(filePath))
            return;

        if (filePath.contains("..")) {
            throw new BadParameterEx("Invalid character found in path.", filePath);
        }

        Path path = Paths.get(filePath);
        if (path.isAbsolute() || filePath.startsWith("/") || filePath.startsWith("://", 1)) {
            throw new BadParameterEx("Invalid character found in path.", filePath);
        }
    }
}