浏览代码

Исправлен баг "Malicious entry" - ругался на невалидные имена файлов при извлечении из zip-архива

Book Pauk 2 年之前
父节点
当前提交
d9cc0ffa23
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      server/core/ZipReader.js

+ 1 - 1
server/core/ZipReader.js

@@ -14,7 +14,7 @@ class ZipReader {
         if (this.zip)
         if (this.zip)
             throw new Error('Zip file is already open');
             throw new Error('Zip file is already open');
 
 
-         const zip = new StreamZip.async({file: zipFile});
+         const zip = new StreamZip.async({file: zipFile, skipEntryNameValidation: true});
          
          
         if (zipEntries)
         if (zipEntries)
             this.zipEntries = await zip.entries();
             this.zipEntries = await zip.entries();