From 5100588c8b875dd1ef0405950da3bcc03ae75ee4 Mon Sep 17 00:00:00 2001
From: Trial97 <alexandru.tripon97@gmail.com>
Date: Fri, 31 Oct 2025 12:52:55 +0200
Subject: [PATCH] ensure secure extraction

Signed-off-by: Trial97 <alexandru.tripon97@gmail.com>
---
 launcher/archive/ArchiveWriter.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/launcher/archive/ArchiveWriter.cpp b/launcher/archive/ArchiveWriter.cpp
index 0d678c152..4880e2cb0 100644
--- a/launcher/archive/ArchiveWriter.cpp
+++ b/launcher/archive/ArchiveWriter.cpp
@@ -201,7 +201,8 @@ bool ArchiveWriter::addFile(ArchiveReader::File* f)
 
 std::unique_ptr<archive, void (*)(archive*)> ArchiveWriter::createDiskWriter()
 {
-    int flags = ARCHIVE_EXTRACT_TIME | ARCHIVE_EXTRACT_PERM | ARCHIVE_EXTRACT_ACL | ARCHIVE_EXTRACT_FFLAGS;
+    int flags = ARCHIVE_EXTRACT_TIME | ARCHIVE_EXTRACT_PERM | ARCHIVE_EXTRACT_ACL | ARCHIVE_EXTRACT_FFLAGS |
+                ARCHIVE_EXTRACT_SECURE_NODOTDOT | ARCHIVE_EXTRACT_SECURE_SYMLINKS;
 
     std::unique_ptr<archive, void (*)(archive*)> extPtr(archive_write_disk_new(), [](archive* a) {
         if (a) {