Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: svrooij/WingetIntune
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.0.2
Choose a base ref
...
head repository: svrooij/WingetIntune
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.0.3
Choose a head ref
  • 8 commits
  • 19 files changed
  • 3 contributors

Commits on Sep 4, 2024

  1. Add security file

    @svrooij
    svrooij committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    41dfd34 View commit details
    Browse the repository at this point in the history

  2. add code scanning

    @svrooij
    svrooij committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    fe3693c View commit details
    Browse the repository at this point in the history

  3. Merge pull request #115 from svrooij/feature/community-stuff 

    Feature/community stuff
    @svrooij
    svrooij authored Sep 4, 2024
    Configuration menu
    Copy the full SHA
    401c934 View commit details
    Browse the repository at this point in the history

  4. Fix code scanning alert - Arbitrary file access during archive extrac… 

    …tion ("Zip Slip")

Fixes #116

Fix the arbitrary file access during archive extraction (Zip Slip) vulnerability.

* **src/Winget.CommunityRepository.Ef/WingetRepositoryWithEf.cs**
  - Add `ExtractToDirectory` method to validate file paths during extraction.
  - Update `LoadEntriesFromSqlLite` method to use the new `ExtractToDirectory` method.

* **src/WingetIntune/Implementations/DefaultFileManager.cs**
  - Add validation for file paths in `ExtractFileToFolder` method.
  - Update `ExtractFileToFolderAsync` method to validate file paths during extraction.

---

For more details, open the [Copilot Workspace session](https://copilot-workspace.githubnext.com/svrooij/WingetIntune/issues/116?shareId=XXXX-XXXX-XXXX-XXXX).
    @svrooij
    svrooij committed Sep 4, 2024
    Configuration menu
    Copy the full SHA
    5235db3 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #117 from svrooij/fix-zip-slip 

    Fix code scanning alert - Arbitrary file access during archive extraction ("Zip Slip")
    @svrooij
    svrooij authored Sep 4, 2024
    Configuration menu
    Copy the full SHA
    8f2041a View commit details
    Browse the repository at this point in the history

Commits on Sep 18, 2024

  1. Add ability to do cert based authentication and app supersedening (#118) 

    * Fix issue with superseding app having been superseded.
---------

Co-authored-by: Crcobb <1474340+crcobb@users.noreply.github.com>
    @crcobb
    crcobb and crcobb authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    491ea9f View commit details
    Browse the repository at this point in the history

Commits on Nov 13, 2024

  1. Auto skip logo when unavailable (#130) 

    * Auto skip logo when unavailable Fixed #120
* Upgrade packages
    @svrooij
    svrooij authored Nov 13, 2024
    Configuration menu
    Copy the full SHA
    2bc20f4 View commit details
    Browse the repository at this point in the history

  2. Skip Kiota factory (#132) 

    Fixes #114 (hopefully)
    @svrooij
    svrooij authored Nov 13, 2024
    Configuration menu
    Copy the full SHA
    81a4bb0 View commit details
    Browse the repository at this point in the history
Loading