Files
dokku/tests/unit
Jose Diaz-Gonzalez 2df0791fcd fix: prevent tar symlink traversal in archive extraction
Archives passed to git:from-archive and certs:add were extracted without symlink or path validation, allowing a crafted archive to write arbitrary files anywhere writable by the dokku user via symlink traversal. Extraction now pre-scans entries for absolute paths, parent traversal, and unsafe symlinks, applies the GNU tar `--no-unsafe-links` flag when available, and validates symlinks after extraction.
2026-05-09 12:54:42 -04:00
..
2026-04-27 01:05:41 -04:00
2026-05-04 13:16:28 -04:00
2017-02-24 12:41:12 -03:00
2024-03-13 07:47:54 -04:00
2024-03-13 07:47:54 -04:00
2026-04-30 18:40:57 -04:00
2024-01-19 03:51:21 -05:00
2024-02-27 14:19:53 -05:00
2024-02-25 15:54:31 -05:00
2025-11-18 17:06:30 -05:00
2025-11-09 20:21:10 -05:00