Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions RELEASE-NOTES.txt
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
Unreleased
==========
* Miscellaneous security improvements #1411
* Follow symlinks when creating preview sites #1447

1.5.2
=====
Expand Down
14 changes: 14 additions & 0 deletions patches/archiver+6.0.2.patch
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
diff --git a/node_modules/archiver/lib/core.js b/node_modules/archiver/lib/core.js
index 7c0a74d..5ac4e3a 100644
--- a/node_modules/archiver/lib/core.js
+++ b/node_modules/archiver/lib/core.js
@@ -631,7 +631,8 @@ Archiver.prototype.directory = function(dirpath, destpath, data) {

var globOptions = {
stat: true,
- dot: true
+ dot: true,
+ follow: true,
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We could consider using the same code from your node-archiver PR: archiverjs/node-archiver#810

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a good point. I decided to use this simple approach because it will be discarded if there is a potential upgrade. But thinking about it, and related to this other PR #1448, it is more explicit to set the option from the calling code, i.e. archiver('zip', {followSymlinks: true}), and the changes in the calling code will reflect better why the symlinks are followed, so I will apply your suggested changes instead 👍

Copy link
Copy Markdown
Contributor Author

@epeicher epeicher May 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done as part of latest commits f10e4c8, be3b8a6 and 51437f9

};

function onGlobEnd() {
Loading