♻️ Use Patter.quote() in all replaceFirst() and replaceAll() invocations

Author: ujibang

commons/src/main/java/org/restheart/security/AclVarsInterpolator.java

@@ -276,12 +276,12 @@ static String interpolatePredicate(String predicate, String prefix, BsonDocument
         // interpolate primitive values
         flatten.keySet().stream().filter(key -> flatten.get(key) != null)
                 .filter(key -> isJsonPrimitive(flatten.get(key)))
-                .forEach(key -> ret[0] = ret[0].replaceAll(prefix.concat(key), quote(jsonPrimitiveValue(flatten.get(key)))));
+                .forEach(key -> ret[0] = ret[0].replaceAll(Pattern.quote(prefix.concat(key)), quote(jsonPrimitiveValue(flatten.get(key)))));
 
         // interpolate arrays
         flatten.keySet().stream().filter(key -> flatten.get(key) != null)
                 .filter(key -> isJsonArray(flatten.get(key)))
-                .forEach(key -> ret[0] = ret[0].replaceAll(prefix.concat(key), jsonArrayValue(flatten.get(key).asArray())));
+                .forEach(key -> ret[0] = ret[0].replaceAll(Pattern.quote(prefix.concat(key)), jsonArrayValue(flatten.get(key).asArray())));
 
         // remove unboud variables
         flatten.keySet().stream().forEach(key -> ret[0] = removeUnboundVariables(prefix, ret[0]));

commons/src/main/java/org/restheart/utils/ResourcesExtractor.java

@@ -34,6 +34,8 @@
 import java.nio.file.attribute.BasicFileAttributes;
 import java.util.HashMap;
 import java.util.Map;
+import java.util.regex.Pattern;
+
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
@@ -77,6 +79,7 @@ public static void deleteTempDir(Class clazz, String resourcePath, File tempDir)
 
     /**
      *
+     * @param clazz
      * @param resourcePath
      * @return
      * @throws java.io.IOException
@@ -127,7 +130,7 @@ private FileVisitResult copy(Path fileOrDir) throws IOException {
                             return FileVisitResult.CONTINUE;
                         }
 
-                        Path destination = Paths.get(destinationDir.toString(), fileOrDir.toString().replaceAll(resourcePath + "/", ""));
+                        Path destination = Paths.get(destinationDir.toString(), fileOrDir.toString().replaceAll(Pattern.quote(resourcePath) + "/", ""));
 
                         Files.copy(fileOrDir, destination, StandardCopyOption.REPLACE_EXISTING);
                         return FileVisitResult.CONTINUE;

commons/src/main/java/org/restheart/utils/URLUtils.java

@@ -130,7 +130,7 @@ public static String getParentPath(String path) {
      * @return the prefix url of the exchange
      */
     public static String getPrefixUrl(HttpServerExchange exchange) {
-        return exchange.getRequestURL().replaceAll(exchange.getRelativePath(), "");
+        return exchange.getRequestURL().replaceAll(Pattern.quote(exchange.getRelativePath()), "");
     }
 
     /**