U Team Core

U Team Core

Mods
37M Downloads

JarSignVerifier should check all zip entries

HyCraftHD opened this issue ยท 0 comments

commented

Currenty the JarSignVerifier only checks the manifest and the .class files if they are signed.
We should also check all other resources excluding directories and the certificate files with the end .SF .DSA .EC .RSA

U-Team-Core/src/main/java/info/u_team/u_team_core/util/verify/JarSignVerifier.java

Line 60 in e7cbe11

if (entryStream.filter(entry -> entry.getName().endsWith(".class") || entry.getName().endsWith(".MF")).allMatch(entry -> {