Files
CloakBrowser/tests
CloakHQ 5010f99556 refactor(download): unpack verified archives directly
The download is signature/checksum-verified before extraction, so the
per-member path/symlink sanitization was redundant. Extract archives as-is
across all three wrappers (Python, JS, .NET), tar and zip.

- Python: filter="fully_trusted" (pins legacy behavior; 3.14 defaults to
  "data"), plain zip extractall
- JS: drop the tar filter callback; inline the one-line extractTar
- .NET: TarFile/ZipFile.ExtractToDirectory; remove orphan ResolveSafeEntryPath
- Drop the obsolete traversal/symlink tests
2026-09-10 23:58:58 +02:00
..