Peter Steinberger
3aa94afcfd
fix(security): harden archive extraction (#16203)
* fix(browser): confine upload paths for file chooser
* fix(browser): sanitize suggested download filenames
* chore(lint): avoid control regex in download sanitizer
* test(browser): cover absolute escape paths
* docs(browser): update upload example path
* refactor(browser): centralize upload path confinement
* fix(infra): harden tmp dir selection
* fix(security): harden archive extraction
* fix(infra): harden tar extraction filter
2026-02-14 14:42:08 +01:00
..
2026-02-01 10:03:47 +09:00
2026-02-14 14:42:08 +01:00
2026-02-01 10:03:47 +09:00
2026-01-27 03:24:54 +00:00
2026-01-14 01:17:56 +00:00
2026-01-31 16:19:20 +09:00