5 Commits

Include renames

Author	SHA1	Message	Date
David Taylor	b4237309c6	Revert "Build(deps): Bump rubyzip from 2.4.1 to 3.2.2 (#35749)" (#37219) ... This reverts commit 8af9e66aa7. Unfortunately this change is incompatible with some plugins. Reverting while we work on a fix.	2026-01-20 18:22:20 +00:00
3 people	8af9e66aa7	Build(deps): Bump rubyzip from 2.4.1 to 3.2.2 (#35749) ... Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 2.4.1 to 3.2.2. - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md) - [Commits](https://github.com/rubyzip/rubyzip/compare/v2.4.1...v3.2.2) --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joffrey JAFFEUX <j.jaffeux@gmail.com>	2026-01-14 11:53:39 +01:00
David Taylor	6417173082	DEV: Apply syntax_tree formatting to lib/*	2023-01-09 12:10:19 +00:00
3 people	b27d5626d2	SECURITY: Prevent arbitrary file write when decompressing files (#18421) ... * SECURITY: Prevent arbitrary file write when decompressing files * FIX: Allow decompressing files into symlinked directories Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com> Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>	2022-09-29 20:00:38 +02:00
Roman Rizzi	10565e4623	SECURITY: Safely decompress files. (#8124) ... * FEATURE: Adds an extra protection layer when decompressing files. * Rename exporter/importer to zip importer. Update old locale * Added a new composite class to decompress a file with multiple strategies * Set max file size inside a site setting * Ensure that file is deleted after compression * Sanitize path and files before compressing/decompressing	2019-10-03 10:19:35 -03:00