06781ef4e3
Merge pull request 'Reject path-traversal archive entries and make the install swap cross-filesystem safe' (#2) from benvin/extract-and-swap-fixes into main
main
benvin2026-09-06 10:46:35 +10:00
6e1b018adb
Validate zip symlinks and backslash paths before extraction
unkin-agent2026-09-05 16:59:11 +10:00
ca55c9dd9f
Validate archive entries and stage inside the pack root
unkin-agent2026-09-05 16:32:47 +10:00