[FLINK-29122] Improve robustness of FileUtils.expandDirectory()

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.16.0, 1.17.0
• Fix Version/s: 1.20.0
• Component/s: API / Core
• Labels: pull-request-available
• Assignee: Anupam Aggarwal
• Reporter: Robert Metzger
• Created: 26/Aug/22 13:14
• Updated: 13/Mar/24 15:02
• Resolved: 13/Mar/24 15:02

Description

`FileUtils.expandDirectory()` can potentially write to invalid locations if the zip file is invalid (contains entry names with ../).

Issue Links

• links to: GitHub Pull Request #24307