Code

Prevent directory traversal#73

Code

Merged

sindresorhus merged 11 commits intokevva:masterkevva/decompress:masterfrom trptcolin:directory-traversal-patchtrptcolin/decompress:directory-traversal-patchCopy head branch name to clipboardApr 1, 2020

+136-14

Commits

Commits on Feb 27, 2020

• Get tests back to passing with ava/xo releases

  trptcolin

  committed
  7b9f484

  Copy full SHA for 7b9f484

• Throw rather than allowing directory traversal

  trptcolin

  committed
  3788e03

  Copy full SHA for 3788e03

• Handle dots within filenames

  trptcolin

  committed
  1a05f01

  Copy full SHA for 1a05f01

• Require files to be in given output directory

  trptcolin

  committed
  3a60aaa

  Copy full SHA for 3a60aaa

• Update tested node versions

  trptcolin

  committed
  432db78

  Copy full SHA for 432db78

• Prevent directories creation outside output path

  trptcolin

  committed
  8850e7e

  Copy full SHA for 8850e7e

• Accommodate Node 10's fs.rmdir API with rimraf

  Show description for 949027c
  trptcolin

  committed
  949027c

  Copy full SHA for 949027c

• Add Node 13 to the build matrix

  trptcolin

  committed
  2d797ce

  Copy full SHA for 2d797ce

Commits on Feb 28, 2020

• Prevent file writes through a symlink

  Show description for 325a071
  trptcolin

  committed
  325a071

  Copy full SHA for 325a071

Commits on Feb 29, 2020

• Prevent writing a file through a symlink

  Show description for a043c4b
  trptcolin

  committed
  a043c4b

  Copy full SHA for a043c4b

• Remove environment-specific test

  Show description for 49d83eb
  trptcolin

  committed
  49d83eb

  Copy full SHA for 49d83eb