2 Commits

Author	SHA1	Message	Date
YeonGyu-Kim	d861d51959	fix(security): add archive extraction containment validation ... Validate tar and zip entries before extraction to prevent path traversal: - Reject absolute paths in archives - Reject .. traversal paths - Reject symlinks pointing outside extraction dir - New archive-entry-validator module with comprehensive tests Addresses: security audit finding for unsafe archive extraction.	2026-04-02 15:01:15 +09:00
popododo0720	10a5bab94d	fix: use version-aware zip extraction on Windows (#563)	2026-01-11 18:21:48 +09:00