--- old/src/java.base/share/classes/jdk/internal/jrtfs/JrtFileSystemProvider.java 2019-05-28 11:33:14.000000000 +0530 +++ new/src/java.base/share/classes/jdk/internal/jrtfs/JrtFileSystemProvider.java 2019-05-28 11:33:13.000000000 +0530 @@ -190,10 +190,10 @@ throw new IllegalArgumentException("Fragment component present"); } String path = uri.getPath(); - if (path == null || path.charAt(0) != '/') { + if (path == null || path.charAt(0) != '/' || path.contains("..")) { throw new IllegalArgumentException("Invalid path component"); } - return getTheFileSystem().getPath(path); + return getTheFileSystem().getPath("/modules" + path); } private FileSystem getTheFileSystem() {