mirror of
https://github.com/PHPOffice/PhpSpreadsheet.git
synced 2026-08-19 02:50:36 +00:00
df3c6d9122
Fix #3807. Function attempts to rationalize `..` in filenames in a way that normally works just fine. Reporter notes that at least one of the filenames that will be analyzed when a spreadsheet is read can be maliciously altered in a manner which does not harm Excel when reading the file, but which puts PhpSpreadsheet into a loop. This PR fixes the problem.