package com.atlassian.core.util.zip;
   
   import com.google.common.annotations.VisibleForTesting;
   import org.apache.commons.lang.StringUtils;
   
   /**
    * Utilities to cleanup file path
    *
    * @since v4.6.13
   */
  class FilePathUtils
  {
      /**
       * Returns the sanitised path (protection against path traversal attacks JDEV-24536, JDEV-24537)
       *
       * @param path string to sanitise
       */
      @VisibleForTesting
      static String stripSlashes(final String path)
      {
          String result = path;
          result = result.replaceAll("\\\\", "/");// Replaces all backslashes with slashes
          result = result.replaceAll("(/)+", "/"); // Replaces multiple slashes with a single slash
          result = result.replaceAll("(\\.){2,}+/", ""); // Replaces 2 and more (e.g. ../) dots followed by a slash
          result = result.replaceAll("(\\./)", ""); // Replaces current directories (./)
          if (StringUtils.startsWith(result, "/"))
          {
              result = StringUtils.substring(result, 1);
          }
          if (StringUtils.endsWith(result, "/"))
          {
              result = StringUtils.substring(result, 0, result.length() - 1);
          }
          return result;
      }
  }