Peter Steinberger 3aa94afcfd fix(security): harden archive extraction (#16203) ...

* fix(browser): confine upload paths for file chooser

* fix(browser): sanitize suggested download filenames

* chore(lint): avoid control regex in download sanitizer

* test(browser): cover absolute escape paths

* docs(browser): update upload example path

* refactor(browser): centralize upload path confinement

* fix(infra): harden tmp dir selection

* fix(security): harden archive extraction

* fix(infra): harden tar extraction filter

2026-02-14 14:42:08 +01:00

1.2 KiB

Raw Blame History

View Raw