i2psnark: Sanitize unicode LTR/RTL control chars

i2p · Jan 29, 2024 · 1126b0a · 1126b0a
1 parent 777da8d
commit 1126b0a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/apps/i2psnark/java/src/org/klomp/snark/Storage.java b/apps/i2psnark/java/src/org/klomp/snark/Storage.java
@@ -904,7 +904,10 @@ public void reopen() throws IOException
         0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
         0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
         // unicode newlines
-        0x2028, 0x2029
+        0x2028, 0x2029,
+        // LTR/RTL
+        // https://security.stackexchange.com/questions/158802/how-can-this-executable-have-an-avi-extension
+        0x202a, 0x202b, 0x202c, 0x202d, 0x202e, 0x200e, 0x200f
      };
 
   // https://docs.microsoft.com/en-us/windows/desktop/FileIO/naming-a-file