Reject path-traversal archive entries and make the install swap cross-filesystem safe #2

Merged

benvin merged 2 commits from benvin/extract-and-swap-fixes into main

2026-09-06 10:46:35 +10:00

Author	SHA1	Message	Date
unkin-agent	6e1b018adb	Validate zip symlinks and backslash paths before extraction ci/woodpecker/pr/test Pipeline was successful Details ci/woodpecker/pr/lint Pipeline was successful Details ci/woodpecker/pr/pre-commit Pipeline was successful Details - treat `\` as a separator in safe_relative so `\abs` and `..\..\x` are refused - read zip symlink targets with `unzip -p` off the `unzip -Z -l` listing and reject escapes before unpacking	2026-09-05 16:59:24 +10:00
unkin-agent	ca55c9dd9f	Validate archive entries and stage inside the pack root ci/woodpecker/pr/test Pipeline was successful Details ci/woodpecker/pr/lint Pipeline was successful Details ci/woodpecker/pr/pre-commit Pipeline was successful Details - Reject archive members that are absolute, escape via .., are special files, or link outside the destination, before anything is written - Stage under the pack root so the swap is a same-filesystem rename, with an EXDEV copy fallback; propagate registry auth errors and validate dir_name	2026-09-05 16:32:47 +10:00