Fix zip extraction path traversal vulnerability in DevPullCommand - #22

Draft

sak0a with Copilot wants to merge 7 commits into

copilot/sub-pr-18-yet-again

Commits on Feb 7, 2026

Add GitHub repository configuration and register DevPullCommand
sak0a
committed
80749a6
Update version to 1.2.4 and add `notur:dev:pull` command for GitHub integration
sak0a
committed
cf01adb
Fix package manager detection for npm
sak0a
committed
07a5b54
Initial plan
Copilot
committed
c1256be
Add path validation to prevent zip extraction path traversal attacks

Copilot
and
sak0a
committed
e46dd76
Improve path validation logic and add tests for edge cases

Copilot
and
sak0a
committed
821b0f0
Enhance security with better symlink handling and error checking

Copilot
and
sak0a
committed
bcb96d9