sysy 022fbf633b fix: sanitize archive entry paths before extraction to prevent path traversal ...

Move path sanitization before directory handling in extractFile so
directory entries with "../" prefixes are rejected the same way file
entries already are. Add the same sanitization to extractSevenZipMultiPart
and both zip extraction loops in the Windows updater, which had no path
validation at all.

2026-09-16 23:31:35 -04:00

..

main.go

feat: refactor browser extension communication to use IPC (#1130)

2025-10-12 21:17:07 +08:00

updater_darwin.go

feat: refactor browser extension communication to use IPC (#1130)

2025-10-12 21:17:07 +08:00

updater_linux.go

feat: auto updater (#933)

2025-03-13 18:31:38 +08:00

updater_windows.go

fix: sanitize archive entry paths before extraction to prevent path traversal

2026-09-16 23:31:35 -04:00