fix: 路径操作资源保护

YeeAmosFireAutoSysService/src/main/java/com/yeejoin/amos/fas/business/util/FileUtils.java

 package com.yeejoin.amos.fas.business.util;
 
+import org.apache.commons.io.FilenameUtils;
 import org.apache.commons.lang3.StringUtils;
 import org.apache.logging.log4j.LogManager;
 import org.apache.logging.log4j.Logger;
@@ -79,6 +80,10 @@ public class FileUtils {
      * @return
      */
     public static String fileToZip(List<String> list, String fileName, String ipUrl) {
+        if (StringUtils.isBlank(fileName)) {
+            throw new RuntimeException("文件名不能为空");
+        }
+        fileName = FilenameUtils.normalize(fileName);
         InputStream fis = null;
         BufferedInputStream bis = null;
         FileOutputStream fos = null;
@@ -91,7 +96,7 @@ public class FileUtils {
         } else if (StringUtils.isBlank(tmpdir)){
             tmpdir = "";
         }
-        String path = tmpdir + fileName;
+        String path = FilenameUtils.normalize(tmpdir + fileName);
         try {
             File zipFile = new File(path);
             zipFile.deleteOnExit();