Pipe: Added parameter check to handshake of legacy receiver (#16596)

Author: Caideyipi

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/receiver/protocol/legacy/IoTDBLegacyPipeReceiverAgent.java

@@ -102,6 +102,11 @@ public TSStatus handshake(
       final String remoteAddress,
       final IPartitionFetcher partitionFetcher,
       final ISchemaFetcher schemaFetcher) {
+    if (!validatePipeName(syncIdentityInfo)) {
+      return new TSStatus(TSStatusCode.ILLEGAL_PARAMETER.getStatusCode())
+          .setMessage("Invalid pipeName");
+    }
+
     final SyncIdentityInfo identityInfo = new SyncIdentityInfo(syncIdentityInfo, remoteAddress);
     LOGGER.info("Invoke handshake method from client ip = {}", identityInfo.getRemoteAddress());
 
@@ -118,6 +123,10 @@ public TSStatus handshake(
     return RpcUtils.getStatus(TSStatusCode.SUCCESS_STATUS, "");
   }
 
+  private boolean validatePipeName(final TSyncIdentityInfo info) {
+    return info.isSetPipeName() && !info.getPipeName().contains(File.separator);
+  }
+
   private void createConnection(final SyncIdentityInfo identityInfo) {
     final long connectionId = connectionIdGenerator.incrementAndGet();
     currentConnectionId.set(connectionId);