Skip to content

Add path traversal guard to FileLocalizer.expand() - #16188

Open
herdiyana256 wants to merge 2 commits into
cdapio:developfrom
herdiyana256:fix-zipslip-filelocalizer-path-traversal
Open

Add path traversal guard to FileLocalizer.expand()#16188
herdiyana256 wants to merge 2 commits into
cdapio:developfrom
herdiyana256:fix-zipslip-filelocalizer-path-traversal

Normalize target directory before path traversal check

a6a7bc0
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Jul 15, 2026 in 7s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

a6a7bc0 Author: @herdiyana256 <herd*******ops​@gmail.com>

(Only the first commit for a unique contributor is listed.)