Make handling of paths that contain ..
or .
more robust and secure:
- Improves path normalization and duplicate matching if parent directory selectors (
..
) or current directory selectors (.
) are present - Allows
..
or.
in within zipfile relative paths (after!
) - Protects against a variant of the "zip slip" vulnerability -- only allows
..
up to the root of the enclosing directory or zipfile hierarchy.