deadcxap/inpx-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Исправлен баг "Malicious entry" - ругался на невалидные имена файлов при извлечении из zip-архива

Browse Source
This commit is contained in:
Book Pauk
2022-10-17 23:16:27 +07:00
parent de73eec019
commit d9cc0ffa23
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/core/ZipReader.js
View File

@@ -14,7 +14,7 @@ class ZipReader {
if (this.zip) if (this.zip)
throw new Error('Zip file is already open'); throw new Error('Zip file is already open');
const zip = new StreamZip.async({file: zipFile}); const zip = new StreamZip.async({file: zipFile, skipEntryNameValidation: true});
if (zipEntries) if (zipEntries)
this.zipEntries = await zip.entries(); this.zipEntries = await zip.entries();