github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-21 18:12:32 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: Safely decompress backups when restoring. (#8166)

Browse Source 
* SECURITY: Safely decompress backups when restoring.

* Fix tests and update theme_controller_spec to work with zip files instead of .tar.gz
This commit is contained in:
Roman Rizzi
2019-10-09 11:41:16 -03:00
committed by GitHub
parent 9b4aba0d39
commit 5357ab3324
9 changed files with 184 additions and 124 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/compression/pipeline.rb
View File

@ -21,11 +21,10 @@ module Compression
end
def decompress(dest_path, compressed_file_path, allow_non_root_folder: false)
to_decompress = compressed_file_path
@strategies.reverse.each do |strategy|
@strategies.reverse.reduce(compressed_file_path) do |to_decompress, strategy|
last_extension = strategy.extension
strategy.decompress(dest_path, to_decompress, allow_non_root_folder: allow_non_root_folder)
to_decompress = compressed_file_path.gsub(last_extension, '')
to_decompress.gsub(last_extension, '')
end
end
end