dchukkapalli-dev 413c38dbcb fix(asar): prevent path traversal (zip-slip) during extraction ...

AsarExtractor's path-traversal guard called Extensions.GetRelativePath,
whose fast path strips the destination prefix literally without resolving
".." segments. A crafted archive entry such as "a/../../evil" produced a
relative path that did not start with "..", so the guard passed and the
file was written outside the extraction directory once the OS resolved the
"..". The out-of-package symlink guard shared the same weakness.

Add Extensions.IsPathInside, which normalises both paths with
Path.GetFullPath before the containment check, and use it for both the
file/directory and symlink guards.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-13 19:59:06 +00:00

..

Extensions.cs

fix(asar): prevent path traversal (zip-slip) during extraction

2026-07-13 19:59:06 +00:00

NativeMethods.cs

electron removed

2025-03-21 23:35:16 +02:00