luna/oh-my-opencode
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5,468 Commits 102 Branches 0 Tags
f178ea3207629a15cc457f2addb936b377355f3c
Commit Graph

4 Commits

Author SHA1 Message Date
YeonGyu-Kim 2288988f28 fix(zip): use zipinfo to preflight zip extraction on unix 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
 2026-04-03 18:34:12 +09:00
YeonGyu-Kim 22c8e8388f Fix Linux ZIP preflight entry listing 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
 2026-04-03 17:23:09 +09:00
YeonGyu-Kim d861d51959 fix(security): add archive extraction containment validation 
Validate tar and zip entries before extraction to prevent path traversal:
- Reject absolute paths in archives
- Reject .. traversal paths
- Reject symlinks pointing outside extraction dir
- New archive-entry-validator module with comprehensive tests

Addresses: security audit finding for unsafe archive extraction.
 2026-04-02 15:01:15 +09:00
popododo0720 10a5bab94d fix: use version-aware zip extraction on Windows (#563) 2026-01-11 18:21:48 +09:00