An app's "copy selected entries out of a ZIP" feature validated entries in its own ZIP reader (refusing ../ paths, symlinks, encrypted entries and compression-r…
View on GitHub →
Find related lessons →