Brian Donovan 14e7c50478 fix(cli): prevent "zip slip" vulnerability in tool extract ...

Using the name directly from a zip archive's entry and writing to it is a potential security vulnerability. More information about the vulnerability can be found here: https://security.snyk.io/research/zip-slip-vulnerability and here https://docs.rs/zip/latest/zip/read/struct.ZipFile.html#warnings.

It looks like the previous version maybe tried to remove `\` characters to prevent this, but only in directory paths?

2023-08-04 20:02:07 -07:00

..

autofmt

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

check

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

cli

fix(cli): prevent "zip slip" vulnerability in tool extract

2023-08-04 20:02:07 -07:00

core

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

core-macro

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

desktop

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

dioxus

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

dioxus-tui

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

extension

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

fermi

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

fullstack

Merge pull request #1285 from Demonthos/flexable-server-function-features

2023-08-03 12:16:32 -07:00

hooks

docs(hooks): fix typos (#1299)

2023-08-04 15:13:02 -05:00

hot-reload

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

html

doc: fix typo (#1287)

2023-08-03 16:32:14 -05:00

interpreter

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

liveview

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

mobile

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

native-core

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

native-core-macro

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

rink

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

router

Merge branch 'master' into update-scroll-history-lazy

2023-08-01 10:47:04 -07:00

router-macro

Reject all external routes when parsing a route (#1272)

2023-08-01 12:29:35 -05:00

rsx

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

rsx-rosetta

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

server-macro

make server function features flexible

2023-08-03 11:13:43 -07:00

signals

Add authors to all crates

2023-07-31 17:30:18 -07:00

ssr

Bump crate versions, fix any publish errors

2023-07-31 18:49:54 -07:00

web

build(web): fix default-features warning (#1296)

2023-08-04 12:51:17 -05:00