fix(core): reject ZIP entries not listed in MANIFEST (closes #1)#3

Merged

emretinaztepe merged 3 commits into

mainfrom

fix/issue-1-zip-extraneous-files

Apr 26, 2026

Commits on Apr 26, 2026

fix(core): reject ZIP entries not listed in MANIFEST (CWE-349)
emretinaztepe
committed
test(core): cover verifyFromAuthor path for UNEXPECTED_FILE
emretinaztepe
committed
Merge remote-tracking branch 'origin/main' into fix/issue-1-zip-extraneous-files
emretinaztepe
committed