Browse Source

文件上传添加白名单机制

James 1 year ago
parent
commit
219ec29931
1 changed files with 1 additions and 1 deletions
  1. 1 1
      src/main/java/com/jfinal/upload/MultipartRequest.java

+ 1 - 1
src/main/java/com/jfinal/upload/MultipartRequest.java

@@ -141,7 +141,7 @@ public class MultipartRequest extends HttpServletRequestWrapper {
 
 
 	protected boolean isSafeFile(UploadFile uploadFile) {
 	protected boolean isSafeFile(UploadFile uploadFile) {
 		String fileName = uploadFile.getFileName().trim();
 		String fileName = uploadFile.getFileName().trim();
-		int index = fileName.indexOf('.');
+		int index = fileName.lastIndexOf('.');
 		if (index != -1) {
 		if (index != -1) {
 			String extName = fileName.substring(index + 1);
 			String extName = fileName.substring(index + 1);
 			if (UploadConfig.whitelist.contains(extName)) {
 			if (UploadConfig.whitelist.contains(extName)) {