Using the name directly from a zip archive's entry and writing to it is a potential security vulnerability. More information about the vulnerability can be found here: https://security.snyk.io/research/zip-slip-vulnerability and here https://docs.rs/zip/latest/zip/read/struct.ZipFile.html#warnings. It looks like the previous version maybe tried to remove `\` characters to prevent this, but only in directory paths?
📦✨ Dioxus CLI
Tooling to supercharge Dioxus projects
Installation
Install stable version
cargo install dioxus-cli
Install from git repository
cargo install --git https://github.com/DioxusLabs/dioxus dioxus-cli
Install from local folder
cargo install --path . --debug
Get Started
Use dx create project-name to initialize a new Dioxus project.
It will be cloned from the dioxus-template repository.
Alternatively, you can specify the template path:
dx create hello --template gh:dioxuslabs/dioxus-template
Dioxus Config File
Dioxus CLI will use Dioxus.toml file to Identify some project info and switch some cli feature.
You can get more configure information from Dioxus CLI Document.