Repository navigation

Security: validate extracted archive trees against ZIP-slip / symlink-escape - #11

Draft

mimeding wants to merge 3 commits into

mainfrom

cursor/zip-slip-protection-2812

Draft

Security: validate extracted archive trees against ZIP-slip / symlink-escape#11
mimeding wants to merge 3 commits into
mainfrom
cursor/zip-slip-protection-2812

Commits on May 27, 2026
- Add ZIP-slip / symlink-escape validation after archive extraction
  
  cursoragent
  and
  mimeding
  committed
  c19bc49
- ArchiveSafety: compare canonical path components, not string prefixes
  
  cursoragent
  and
  mimeding
  committed
  b38e404
- Fix flake: skip ModelManager launch-time HF fetch under xctest
  
  cursoragent
  and
  mimeding
  committed
  61f8ed4