diff --git a/aws-serverless-java-container-core/src/main/java/com/amazonaws/serverless/proxy/internal/SecurityUtils.java b/aws-serverless-java-container-core/src/main/java/com/amazonaws/serverless/proxy/internal/SecurityUtils.java index d553d17a7..0023104a7 100644 --- a/aws-serverless-java-container-core/src/main/java/com/amazonaws/serverless/proxy/internal/SecurityUtils.java +++ b/aws-serverless-java-container-core/src/main/java/com/amazonaws/serverless/proxy/internal/SecurityUtils.java @@ -201,7 +201,7 @@ public static String getValidFilePath(final String inputPath, boolean isWrite) { try { String canonicalPath = f.getCanonicalPath(); - if (isWrite && canonicalPath.startsWith("/var/task")) { + if (isWrite && f.getCanonicalFile().toPath().startsWith("/var/task")) { throw new IllegalArgumentException("Trying to write to /var/task folder"); }