add security note
This commit is contained in:
parent
36ea83d5ff
commit
ecf775af38
|
@ -11,3 +11,9 @@
|
|||
* FTP Client upload and logging improvements
|
||||
* Refactor base64 handling for Android compatibility
|
||||
|
||||
## Security Note
|
||||
|
||||
The validator unzips archive files to the local file system when
|
||||
it is scanning zip files it has been asked to validate, and when it is
|
||||
installing packages. These processes are now resistant to the zip-slip
|
||||
vulnerability.
|
Loading…
Reference in New Issue