i2psnark: Sanitize unicode LTR/RTL control chars

2024-01-29 08:34:34 -05:00
parent 777da8dfb1
commit 1126b0ae4e
1 changed files with 4 additions and 1 deletions
--- a/apps/i2psnark/java/src/org/klomp/snark/Storage.java
+++ b/apps/i2psnark/java/src/org/klomp/snark/Storage.java
@ -904,7 +904,10 @@ public class Storage implements Closeable
        0x90, 0x91, 0x92, 0x93, 0x94, 0x95, 0x96, 0x97,
        0x98, 0x99, 0x9a, 0x9b, 0x9c, 0x9d, 0x9e, 0x9f,
        // unicode newlines
-        0x2028, 0x2029
+        0x2028, 0x2029,
+        // LTR/RTL
+        // https://security.stackexchange.com/questions/158802/how-can-this-executable-have-an-avi-extension
+        0x202a, 0x202b, 0x202c, 0x202d, 0x202e, 0x200e, 0x200f
     };

  // https://docs.microsoft.com/en-us/windows/desktop/FileIO/naming-a-file