chore(QTDI-1086) Improve path manipulation detection

Author: coheigea

component-tools/src/main/java/org/talend/sdk/component/tools/exec/CarMain.java

@@ -310,7 +310,7 @@ private static Properties installJars(final File m2Root, final boolean forceOver
                 if (entry.getName().startsWith("MAVEN-INF/repository/")) {
                     final String path = entry.getName().substring("MAVEN-INF/repository/".length());
                     final File output = new File(m2Root, path);
-                    if (!output.getCanonicalPath().startsWith(m2Root.getCanonicalPath())) {
+                    if (!output.getCanonicalPath().startsWith(m2Root.getCanonicalPath() + File.separator)) {
                         throw new IOException("The output file is not contained in the destination directory");
                     }
                     if (!output.exists() || forceOverwrite) {

talend-component-kit-intellij-plugin/src/main/java/org/talend/sdk/component/intellij/module/ProjectDownloader.java

@@ -117,7 +117,7 @@ private static void unzip(final InputStream read, final File destination, final
                     path = path.replaceFirst("^[^/]+/", "");
                 }
                 final File file = new File(destination, path);
-                if (!file.getCanonicalPath().startsWith(destination.getCanonicalPath())) {
+                if (!file.getCanonicalPath().startsWith(destination.getCanonicalPath() + File.separator)) {
                     throw new IOException("The output file is not contained in the destination directory");
                 }