3 Commits

Author	SHA1	Message	Date
Jarek Radosz	4302097b3b	SECURITY: Prevent arbitrary file write when decompressing files (stable) (#18423) ... * SECURITY: Prevent arbitrary file write when decompressing files * FIX: Allow decompressing files into symlinked directories Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com> Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>	2022-09-29 20:07:58 +02:00
Roman Rizzi	01bc465db8	DEV: Split max decompressed setting for themes and backups (#8179)	2019-10-11 14:38:10 -03:00
Roman Rizzi	10565e4623	SECURITY: Safely decompress files. (#8124) ... * FEATURE: Adds an extra protection layer when decompressing files. * Rename exporter/importer to zip importer. Update old locale * Added a new composite class to decompress a file with multiple strategies * Set max file size inside a site setting * Ensure that file is deleted after compression * Sanitize path and files before compressing/decompressing	2019-10-03 10:19:35 -03:00