Add path traversal guard to FileLocalizer.expand() - #16188

Open

herdiyana256 wants to merge 2 commits into

cdapio:developfrom

herdiyana256:fix-zipslip-filelocalizer-path-traversal

Commits on Jul 15, 2026

Add path traversal guard to FileLocalizer.expand()
herdiyana256
committed
cdccada
Normalize target directory before path traversal check
herdiyana256
committed
a6a7bc0