]> git.ipfire.org Git - thirdparty/sqlite.git/commit
projects / thirdparty / sqlite.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bb777d5) | patch
Fix the ".archive" command in the CLI (and the corresponding -A command-line
authordrh <drh@noemail.net>
Wed, 6 Jun 2018 01:18:01 +0000 (01:18 +0000)
committerdrh <drh@noemail.net>
Wed, 6 Jun 2018 01:18:01 +0000 (01:18 +0000)
commit0cfd46a1ad5ef1c2bb0d7a56d1a8560998619b42
tree5044fa9999555fc1bb7aea9bead4eed00be2b5e7tree
parentbb777d517d79df02320e2c49e15b75b14441c452commit | diff
Fix the ".archive" command in the CLI (and the corresponding -A command-line
option) so that it silently ignores filenames that contain "../" in their
names.  This prevents the "Zip Slip" attack.

FossilOrigin-Name: 27291f2d7fd4dadf2ee9b9a7d1373158cadfbaf83c3654b00d7030dc921770c6
manifest diff | blob | blame | history
manifest.uuid diff | blob | blame | history
src/shell.c.in diff | blob | blame | history
Mirror of https://github.com/sqlite/sqlite.git