[wp-trac] [WordPress Trac] #42016: Validation of filenames (while unzipping) causes unexpected failures

[WordPress Trac]

#42016: Validation of filenames (while unzipping) causes unexpected failures
----------------------------+--------------------------
 Reporter:  Ipstenu         |       Owner:  johnbillion
     Type:  defect (bug)    |      Status:  closed
 Priority:  normal          |   Milestone:  4.9
Component:  Filesystem API  |     Version:  4.8.2
 Severity:  normal          |  Resolution:  fixed
 Keywords:  has-patch       |     Focuses:
----------------------------+--------------------------
Changes (by johnbillion):

 * status:  reviewing => closed
 * resolution:   => fixed


Comment:

 In [changeset:"42011"]:
 {{{
 #!CommitTicketReference repository="" revision="42011"
 Filesystem API: Add more specificity to the rules for valid files in
 `validate_file()`.

 This now treats files containing `./` as valid, and also treats files
 containing a trailing `../` as valid due to widespread use of this pattern
 in theme and plugin zip files.

 Adds tests.

 Props Ipstenu, borgesbruno, DavidAnderson, philipjohn, birgire
 Fixes #42016, #36170
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/42016#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform