root
/
gitlab-ce
mirror of https://gitlab.com/free-releases/gitlab-ce.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity
115,047 Commits 9,131 Branches 1,640 Tags 2 GiB
Commit Graph

3 Commits

Author SHA1 Message Date
GitLab Bot 22dde36e80 Add latest changes from gitlab-org/gitlab@master 2023-01-31 18:10:00 +00:00
GitLab Bot e5e0589e09 Add latest changes from gitlab-org/gitlab@master 2021-04-26 12:09:44 +00:00
Kamil Trzciński 66744469d4
Extract GitLab Pages using RubyZip 
RubyZip allows us to perform strong validation of
expanded paths where we do extract file.

We introduce the following additional checks
to extract routines:

1. None of path components can be symlinked,
2. We drop privileges support for directories,
3. Symlink source needs to point within the target directory,
   like `public/`,
4. The symlink source needs to exist ahead of time.
 2019-01-31 16:52:48 +01:00