mirror of
https://github.com/discourse/discourse.git
synced 2025-05-22 07:53:49 +08:00
SECURITY: Prevent arbitrary file write when decompressing files (#18421)
* SECURITY: Prevent arbitrary file write when decompressing files * FIX: Allow decompressing files into symlinked directories Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com> Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>
This commit is contained in:
@ -22,6 +22,6 @@ module Compression
|
||||
@strategy = strategy
|
||||
end
|
||||
|
||||
delegate :extension, :decompress, :compress, :strip_directory, to: :@strategy
|
||||
delegate :extension, :decompress, :compress, to: :@strategy
|
||||
end
|
||||
end
|
||||
|
Reference in New Issue
Block a user