honeymoose
/
org.hl7.fhir.core
mirror of https://github.com/hapifhir/org.hl7.fhir.core.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add security note

This commit is contained in:
Grahame Grieve 2023-01-21 06:19:06 +11:00
parent 36ea83d5ff
commit ecf775af38
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
RELEASE_NOTES.md
View File

@ -11,3 +11,9 @@
* FTP Client upload and logging improvements * FTP Client upload and logging improvements
* Refactor base64 handling for Android compatibility * Refactor base64 handling for Android compatibility
## Security Note
The validator unzips archive files to the local file system when
it is scanning zip files it has been asked to validate, and when it is
installing packages. These processes are now resistant to the zip-slip
vulnerability.