3 Commits

Author	SHA1	Message	Date
Jarek Radosz	b27d5626d2	SECURITY: Prevent arbitrary file write when decompressing files (#18421) ... * SECURITY: Prevent arbitrary file write when decompressing files * FIX: Allow decompressing files into symlinked directories Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com> Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>	2022-09-29 20:00:38 +02:00
Roman Rizzi	5357ab3324	SECURITY: Safely decompress backups when restoring. (#8166) ... * SECURITY: Safely decompress backups when restoring. * Fix tests and update theme_controller_spec to work with zip files instead of .tar.gz	2019-10-09 11:41:16 -03:00
Roman Rizzi	10565e4623	SECURITY: Safely decompress files. (#8124) ... * FEATURE: Adds an extra protection layer when decompressing files. * Rename exporter/importer to zip importer. Update old locale * Added a new composite class to decompress a file with multiple strategies * Set max file size inside a site setting * Ensure that file is deleted after compression * Sanitize path and files before compressing/decompressing	2019-10-03 10:19:35 -03:00