fix: path traversal guard

kestra-io · Jan 3, 2025 · 3425ee6 · 3425ee6
1 parent cf61e24
commit 3425ee6
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/src/main/java/io/kestra/storage/s3/S3Storage.java b/src/main/java/io/kestra/storage/s3/S3Storage.java
@@ -451,13 +451,6 @@ private String getPath(String tenantId, URI uri) {
         return "/" + tenantId + path;
     }
 
-    // Traversal does not work with s3 but it just return empty objects so throwing is more explicit
-    private void parentTraversalGuard(URI uri) {
-        if (uri.toString().contains("..")) {
-            throw new IllegalArgumentException("File should be accessed with their full path and not using relative '..' path.");
-        }
-    }
-
     private static URI createUri(String tenantId, String key) {
         return URI.create("kestra://%s".formatted(key).replace(tenantId + "/", ""));
     }