mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-14 18:24:01 -09:00
- Santize filenames when files are loaded with loadAsync, to avoid "zip slip" attacks. The original filename is available on each zip entry as unsafeOriginalName. See the documentation. - Drop patch (already in version) - Update hash of license file (dual licensing clarification withf81c2d700d) - Update indentation in hash file (two spaces) https://github.com/Stuk/jszip/blob/v3.10.0/CHANGES.md Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commitfe522b9c17) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>