From f77415f03a9f5b2128ad39db0aaf84545fcdd52c Mon Sep 17 00:00:00 2001 From: Yurii Date: Wed, 27 May 2026 13:27:09 +0300 Subject: [PATCH] Extension file with slash BC support --- application/Espo/Core/Utils/File/ZipArchive.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/application/Espo/Core/Utils/File/ZipArchive.php b/application/Espo/Core/Utils/File/ZipArchive.php index 720a46c6ff..6660982202 100644 --- a/application/Espo/Core/Utils/File/ZipArchive.php +++ b/application/Espo/Core/Utils/File/ZipArchive.php @@ -75,6 +75,11 @@ class ZipArchive continue; } + // For BC. + if (str_starts_with($filename, '/')) { + $filename = substr($filename, 1); + } + if ( str_contains($filename, '..') || str_starts_with($filename, '/') ||