Merge branch 'release/1.0.6'

1.0.6
Исправлен баг "Malicious entry" - ругался на невалидные имена файлов при извлечении из zip-архива
2022-10-17 23:32:59 +07:00 · 2022-10-17 23:32:36 +07:00 · 2022-10-17 23:16:27 +07:00 · 2022-10-17 20:10:15 +07:00
3 changed files with 4 additions and 4 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "inpx-web",
-  "version": "1.0.5",
+  "version": "1.0.6",
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "name": "inpx-web",
-      "version": "1.0.5",
+      "version": "1.0.6",
      "hasInstallScript": true,
      "license": "CC0-1.0",
      "dependencies": {
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "inpx-web",
-  "version": "1.0.5",
+  "version": "1.0.6",
  "author": "Book Pauk <bookpauk@gmail.com>",
  "license": "CC0-1.0",
  "repository": "bookpauk/inpx-web",
--- a/server/core/ZipReader.js
+++ b/server/core/ZipReader.js
@@ -14,7 +14,7 @@ class ZipReader {
        if (this.zip)
            throw new Error('Zip file is already open');
-         const zip = new StreamZip.async({file: zipFile});
+         const zip = new StreamZip.async({file: zipFile, skipEntryNameValidation: true});
        if (zipEntries)
            this.zipEntries = await zip.entries();
Author	SHA1	Message	Date
Book Pauk	48eecf7b4c	Merge branch 'release/1.0.6'	2022-10-17 23:32:59 +07:00
Book Pauk	97ca49571c	1.0.6	2022-10-17 23:32:36 +07:00
Book Pauk	d9cc0ffa23	Исправлен баг "Malicious entry" - ругался на невалидные имена файлов при извлечении из zip-архива	2022-10-17 23:16:27 +07:00
Book Pauk	de73eec019	Merge tag '1.0.5' into develop 1.0.5	2022-10-17 20:10:15 +07:00