aboutsummaryrefslogtreecommitdiff
path: root/src/main
diff options
context:
space:
mode:
authorAnton Tananaev <anton@traccar.org>2024-02-05 21:42:08 -0800
committerAnton Tananaev <anton@traccar.org>2024-02-05 21:42:08 -0800
commitc506f723c905fed6995cde26168dce9948599fd4 (patch)
tree9effc4ac9da31e692fa1cc6ca2badccec88de963 /src/main
parent444d54e792418333b98a109490b7eaffc96cdf53 (diff)
downloadtrackermap-server-c506f723c905fed6995cde26168dce9948599fd4.tar.gz
trackermap-server-c506f723c905fed6995cde26168dce9948599fd4.tar.bz2
trackermap-server-c506f723c905fed6995cde26168dce9948599fd4.zip
Add unique id validation
Diffstat (limited to 'src/main')
-rw-r--r--src/main/java/org/traccar/model/Device.java3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/main/java/org/traccar/model/Device.java b/src/main/java/org/traccar/model/Device.java
index e07815976..a3088a613 100644
--- a/src/main/java/org/traccar/model/Device.java
+++ b/src/main/java/org/traccar/model/Device.java
@@ -53,6 +53,9 @@ public class Device extends GroupedModel implements Disableable, Schedulable {
}
public void setUniqueId(String uniqueId) {
+ if (uniqueId.contains("../") || uniqueId.contains("..\\")) {
+ throw new IllegalArgumentException("Invalid unique id");
+ }
this.uniqueId = uniqueId.trim();
}