Repository navigation

Security fixes: ZIP symlink traversal, absolute dst paths, SVN rev injection - #1095

Merged

ben-edna merged 7 commits into

mainfrom

claude/security-audit-fixes-csRiL

Mar 31, 2026

Merged

Security fixes: ZIP symlink traversal, absolute dst paths, SVN rev injection#1095
ben-edna merged 7 commits into
mainfrom
claude/security-audit-fixes-csRiL

Commits on Mar 31, 2026
- Security fixes: ZIP symlink traversal, absolute dst paths, SVN rev injection
  claude
  committed
  6184327
- Security: harden validate_destination, bound ZIP symlink read, tighten SVN test
  claude
  committed
  9e32972
- Security: harden root-relative Windows paths, fail-closed ZIP symlink, exact SVN argv
  claude
  committed
  39a443f
- Security: fix Windows backslash traversal in symlink checks, rename constant
  claude
  committed
  fe8eae2
- Minor formatting changes
  ben-edna
  committed
  593d363
- Reject rooted Windows targets, not just is_absolute() ones.
  ben-edna
  committed
  6eabd61
- Harden tests
  ben-edna
  committed
  96694a8