• Kamil Trzciński's avatar
    Extract GitLab Pages using RubyZip · 1a8100cf
    Kamil Trzciński authored
    RubyZip allows us to perform strong validation of
    expanded paths where we do extract file.
    
    We introduce the following additional checks
    to extract routines:
    
    1. None of path components can be symlinked,
    2. We drop privileges support for directories,
    3. Symlink source needs to point within the target directory,
       like `public/`,
    4. The symlink source needs to exist ahead of time.
    1a8100cf
extract-pages-with-rubyzip.yml 84 Bytes