Connor Tumbleson 93e7d6bdbf Prevent arbitrary file writes with malicious resource names. (#3484) ... * refactor: rename sanitize function * fix: expose getDir * fix: safe handling of untrusted resource names - fixes: GHSA-2hqv-2xv4-5h5w * test: sample file for GHSA-2hqv-2xv4-5h5w * refactor: avoid detection of absolute files for resource check * chore: enable info mode on gradle * test: skip test on windows * chore: debug windows handling * fix: normalize entry with file separators * fix: normalize filepath after cleansing * chore: Android paths are not OS specific * refactor: use java.nio for path traversal checking * chore: align path separator on Windows for Zip files * chore: rework towards basic directory traversal * chore: remove '--info' on build.yml		2024-01-05 06:28:07 -05:00
..
aapt1	test: add test case for android:isAccessibilityTool (#3426)	2023-11-16 05:58:38 -05:00
aapt2	test: add test case for android:isAccessibilityTool (#3426)	2023-11-16 05:58:38 -05:00
apk	refactor: clean up style and redundancy (#3232)	2023-07-29 18:56:27 -04:00
decode	Prevent arbitrary file writes with malicious resource names. (#3484)	2024-01-05 06:28:07 -05:00
encoders	Update docs & licenses to use https	2021-08-26 07:40:32 -04:00
res	Move build functions from Androlib to the ApkBuilder (#3103)	2023-06-27 08:25:27 -04:00
util	Prevent arbitrary file writes with malicious resource names. (#3484)	2024-01-05 06:28:07 -05:00
BaseTest.java	fix: support COMPACT/OFFSET16 packed resources. (#3372)	2023-10-06 07:22:02 -04:00
TestUtils.java	Feat: Introduce "res-mode" options. (#3318)	2023-09-09 07:29:39 -04:00