mirror of
https://github.com/espocrm/espocrm.git
synced 2026-06-28 06:56:05 +00:00
Extension file with slash BC support
This commit is contained in:
@@ -75,6 +75,11 @@ class ZipArchive
|
||||
continue;
|
||||
}
|
||||
|
||||
// For BC.
|
||||
if (str_starts_with($filename, '/')) {
|
||||
$filename = substr($filename, 1);
|
||||
}
|
||||
|
||||
if (
|
||||
str_contains($filename, '..') ||
|
||||
str_starts_with($filename, '/') ||
|
||||
|
||||
Reference in New Issue
Block a user