sysy 022fbf633b fix: sanitize archive entry paths before extraction to prevent path traversal ...

Move path sanitization before directory handling in extractFile so
directory entries with "../" prefixes are rejected the same way file
entries already are. Add the same sanitization to extractSevenZipMultiPart
and both zip extraction loops in the Windows updater, which had no path
validation at all.

2026-09-16 23:31:35 -04:00

..

api

feat: support browse files on web (#283)

2023-11-29 18:24:01 +08:00

extmock

feat: add WebView support for extension (#1359)

2026-04-24 22:16:33 +08:00

gopeed

refactor: fethcer interface & download flow (#1229)

2026-01-08 21:50:47 +08:00

host

feat: new ui (#1455)

2026-09-05 19:53:41 +08:00

updater

fix: sanitize archive entry paths before extraction to prevent path traversal

2026-09-16 23:31:35 -04:00

web

feat: add MCP support (#1471)

2026-09-05 20:21:39 +08:00

banner.txt

feat: new version check (#102)

2023-04-01 15:33:58 +08:00

server.go

fix: web config file not loaded when is relative path (#636)

2024-08-09 12:50:20 +08:00