mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-07-20 00:52:17 -05:00
Validate all zip entry names during restore to reject entries containing directory traversal sequences (e.g. ../../../pwned.txt). This prevents a Zip Slip attack where a malicious archive could write files outside the intended extraction directory.