refactor(drop): replace symlink entry check with dangerous node entry validation

- Updated the unzipDrop function to remove the symlink entry check and replace it with a more general validation for dangerous node entries.
- Adjusted the associated test to reflect the change in error messaging.
This commit is contained in:
Mauricio Siu
2026-02-17 14:31:10 -06:00
parent b58f2b236f
commit 685a4c0b69
2 changed files with 1 additions and 11 deletions
+1 -1
View File
@@ -250,7 +250,7 @@ describe("security: zip symlink entry blocked", () => {
const file = new File([zipBuffer as any], "exploit.zip");
await expect(unzipDrop(file, { ...baseApp, appName })).rejects.toThrow(
/Symlink entries are not allowed/,
/Dangerous node entries are not allowed/,
);
});
});