src/java.base/share/classes/jdk/internal/jrtfs/JrtFileSystemProvider.java

*** 188,201 ****
          }
          if (uri.getFragment() != null) {
              throw new IllegalArgumentException("Fragment component present");
          }
          String path = uri.getPath();
!         if (path == null || path.charAt(0) != '/') {
              throw new IllegalArgumentException("Invalid path component");
          }
!         return getTheFileSystem().getPath(path);
      }
  
      private FileSystem getTheFileSystem() {
          checkPermission();
          FileSystem fs = this.theFileSystem;
--- 188,201 ----
          }
          if (uri.getFragment() != null) {
              throw new IllegalArgumentException("Fragment component present");
          }
          String path = uri.getPath();
!         if (path == null || path.charAt(0) != '/' || path.contains("..")) {
              throw new IllegalArgumentException("Invalid path component");
          }
!         return getTheFileSystem().getPath("/modules" + path);
      }
  
      private FileSystem getTheFileSystem() {
          checkPermission();
          FileSystem fs = this.theFileSystem;