mirror of
https://github.com/andwati/dokploy.git
synced 2026-11-04 19:22:16 +00:00
refactor(drop): replace symlink entry check with dangerous node entry validation
- Updated the unzipDrop function to remove the symlink entry check and replace it with a more general validation for dangerous node entries. - Adjusted the associated test to reflect the change in error messaging.
This commit is contained in:
@@ -250,7 +250,7 @@ describe("security: zip symlink entry blocked", () => {
|
||||
const file = new File([zipBuffer as any], "exploit.zip");
|
||||
|
||||
await expect(unzipDrop(file, { ...baseApp, appName })).rejects.toThrow(
|
||||
/Symlink entries are not allowed/,
|
||||
/Dangerous node entries are not allowed/,
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user