IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 04:28:29 -05:00
Code Issues Packages Projects Releases Wiki Activity
50,631 Commits 956 Branches 574 Tags
e654edf844dea906c570a7dd138fd9e07eee2530
Commit Graph
4 Commits
Author SHA1 Message Date
Daniel Waterworth 666536cbd1 DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
David Taylor 6417173082 DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
Jarek RadoszOsamaSayeghGerhard Schlager
 		b27d5626d2 SECURITY: Prevent arbitrary file write when decompressing files (#18421) 
* SECURITY: Prevent arbitrary file write when decompressing files
* FIX: Allow decompressing files into symlinked directories

Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com>
Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>
 2022-09-29 20:00:38 +02:00
Roman Rizzi 10565e4623 SECURITY: Safely decompress files. (#8124) 
* FEATURE: Adds an extra protection layer when decompressing files.

* Rename exporter/importer to zip importer. Update old locale

* Added a new composite class to decompress a file with multiple strategies

* Set max file size inside a site setting

* Ensure that file is deleted after compression

* Sanitize path and files before compressing/decompressing
 2019-10-03 10:19:35 -03:00