CAN YOU FIND THE SECURITY FLAW IN THIS JAVA CODE？
String pkgId = request.getParameter("_id");
File f = null;
if (pkgId == null) return;
try {f = new File(BASE_DIR+SEP+pkgId);process(f);}
finally { if (f!=null) { f.delete(); }}
某计算机系童鞋的签名。弄死看不懂。。。。
String pkgId = request.getParameter("_id");
File f = null;
if (pkgId == null) return;
try {f = new File(BASE_DIR+SEP+pkgId);process(f);}
finally { if (f!=null) { f.delete(); }}
某计算机系童鞋的签名。弄死看不懂。。。。
