Исправлен баг "Malicious entry" - ругался на невалидные имена файлов при извлечении из zip-архива

2022-10-17 23:16:27 +07:00
parent de73eec019
commit d9cc0ffa23
1 changed files with 1 additions and 1 deletions
--- a/server/core/ZipReader.js
+++ b/server/core/ZipReader.js
@@ -14,7 +14,7 @@ class ZipReader {
        if (this.zip)
            throw new Error('Zip file is already open');

-         const zip = new StreamZip.async({file: zipFile});
+         const zip = new StreamZip.async({file: zipFile, skipEntryNameValidation: true});
         
        if (zipEntries)
            this.zipEntries = await zip.entries();