diff --git a/library/src/main/java/com/opensource/svgaplayer/SVGAParser.kt b/library/src/main/java/com/opensource/svgaplayer/SVGAParser.kt index 053c5b3c..0b696834 100644 --- a/library/src/main/java/com/opensource/svgaplayer/SVGAParser.kt +++ b/library/src/main/java/com/opensource/svgaplayer/SVGAParser.kt @@ -336,6 +336,10 @@ class SVGAParser(context: Context?) { ZipInputStream(it).use { zipInputStream -> while (true) { val zipItem = zipInputStream.nextEntry ?: break + if (zipItem.name.contains("../")) { + // 解压路径存在路径穿越问题,直接过滤 + continue + } if (zipItem.name.contains("/")) { continue }