src/java.base/share/classes/jdk/internal/jrtfs/JrtFileSystemProvider.java

@@ -188,14 +188,14 @@
         }
         if (uri.getFragment() != null) {
             throw new IllegalArgumentException("Fragment component present");
         }
         String path = uri.getPath();
-        if (path == null || path.charAt(0) != '/') {
+        if (path == null || path.charAt(0) != '/' || path.contains("..")) {
             throw new IllegalArgumentException("Invalid path component");
         }
-        return getTheFileSystem().getPath(path);
+        return getTheFileSystem().getPath("/modules" + path);
     }
 
     private FileSystem getTheFileSystem() {
         checkPermission();
         FileSystem fs = this.theFileSystem;