discourse

Author	SHA1	Message	Date
Jarek Radosz	4280c01153	DEV: Fix Lint/ShadowedArgument (#24733 )	2023-12-06 13:16:10 +01:00
David Taylor	6417173082	DEV: Apply syntax_tree formatting to `lib/*`	2023-01-09 12:10:19 +00:00
Jarek Radosz	b27d5626d2	SECURITY: Prevent arbitrary file write when decompressing files (#18421 ) * SECURITY: Prevent arbitrary file write when decompressing files * FIX: Allow decompressing files into symlinked directories Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com> Co-authored-by: Gerhard Schlager <gerhard.schlager@discourse.org>	2022-09-29 20:00:38 +02:00
Roman Rizzi	01bc465db8	DEV: Split max decompressed setting for themes and backups (#8179 )	2019-10-11 14:38:10 -03:00
Roman Rizzi	5357ab3324	SECURITY: Safely decompress backups when restoring. (#8166 ) * SECURITY: Safely decompress backups when restoring. * Fix tests and update theme_controller_spec to work with zip files instead of .tar.gz	2019-10-09 11:41:16 -03:00
Roman Rizzi	10565e4623	SECURITY: Safely decompress files. (#8124 ) * FEATURE: Adds an extra protection layer when decompressing files. * Rename exporter/importer to zip importer. Update old locale * Added a new composite class to decompress a file with multiple strategies * Set max file size inside a site setting * Ensure that file is deleted after compression * Sanitize path and files before compressing/decompressing	2019-10-03 10:19:35 -03:00