Merge remote-tracking branch 'adobe-commerce-tier-4/ACP2E-2959' into Tier4-Kings-PR-06-03-2024

Author: Sarmistha

lib/internal/Magento/Framework/Filesystem/Directory/PathValidator.php

@@ -54,7 +54,7 @@ public function validate(
             $actualPath = $this->driver->getRealPathSafety($path);
         }
 
-        if (preg_match('/(?:^-|\s-)/', $path)
+        if (preg_match('/(?:^-|\s-\S|[\t\r\n\f])/', $path)
             || (
                 mb_strpos($actualPath, $realDirectoryPath) !== 0
                 && rtrim($path, DIRECTORY_SEPARATOR) !== $realDirectoryPath

lib/internal/Magento/Framework/Filesystem/Test/Unit/Directory/PathValidatorTest.php

@@ -1,9 +1,17 @@
 <?php declare(strict_types=1);
-/**
- * Unit Test for \Magento\Framework\Filesystem\Directory\PathValidator
+/************************************************************************
+ * Copyright 2024 Adobe
+ * All Rights Reserved.
  *
- * Copyright © Magento, Inc. All rights reserved.
- * See COPYING.txt for license details.
+ * NOTICE: All information contained herein is, and remains
+ * the property of Adobe and its suppliers, if any. The intellectual
+ * and technical concepts contained herein are proprietary to Adobe
+ * and its suppliers and are protected by all applicable intellectual
+ * property laws, including trade secret and copyright laws.
+ * Dissemination of this information or reproduction of this material
+ * is strictly forbidden unless prior written permission is obtained
+ * from Adobe.
+ * ***********************************************************************
  */
 namespace Magento\Framework\Filesystem\Test\Unit\Directory;
 
@@ -77,6 +85,7 @@ public function validateDataProvider()
         return [
             ['/directory/path/', '/directory/path/', '/', false, '/://'],
             ['/directory/path/', '/var/.regenerate', null, false, ''],
+            ['/directory/path/', '/var/image - 1.jpg', null, false, ''],
         ];
     }
 }