Fix the ".archive" command in the CLI (and the corresponding -A command-line

option) so that it silently ignores filenames that contain "../" in their names. This prevents the "Zip Slip" attack. FossilOrigin-Name: 27291f2d7fd4dadf2ee9b9a7d1373158cadfbaf83c3654b00d7030dc921770c6
2018-06-06 01:18:01 +00:00
parent bb777d517d
commit 0cfd46a1ad
3 changed files with 9 additions and 8 deletions
@@ -1 +1 @@
-7598236c356cdb548c6188d69dfef99f7a08b89e512a3addfe1433ccd85e7b68
+27291f2d7fd4dadf2ee9b9a7d1373158cadfbaf83c3654b00d7030dc921770c6