oleibman df3c6d9122 Prevent Loop in Shared/File::realpath (#3809) ...

Fix #3807. Function attempts to rationalize `..` in filenames in a way that normally works just fine. Reporter notes that at least one of the filenames that will be analyzed when a spreadsheet is read can be maliciously altered in a manner which does not harm Excel when reading the file, but which puts PhpSpreadsheet into a loop. This PR fixes the problem.

2023-12-04 16:58:53 -08:00

8.7 KiB

Raw History

View Raw