[Android] Fixing a Zip Path Traversal Vulnerability

[nick-creston]

Hey. I received a message in the Google Play console:

How to fix: https://support.google.com/faqs/answer/9294009

I'm not sure, but a possible fix is here:
https://github.com/mockingbot/react-native-zip-archive/blob/master/android/src/main/java/com/rnziparchive/RNZipArchiveModule.java#L245-L251

[tarouboy]

I received the same security alert as well.

[sbayd]

• 1, Same security Alert.

[punjasin]

same as well

[plrthink]

Thanks for reporting, would solve this ASAP

[sbayd]

@plrthink Thank you for all your efforts and attention.

[plrthink]

Could you please try the code on the master to see if it would solve the problem? thanks to the PR opened by @ratson, we seems to fix this but still need to verify it.

[punjasin]

Could you please try the code on the master to see if it would solve the problem? thanks to the PR opened by @ratson, we seems to fix this but still need to verify it.

@plrthink i try change the my lib according to ur commit and launch to internal test still have this issue warning

[plrthink]

Double check this issue and yeah we still have the problem. I would fix this before this weekend.

[plrthink]

Has published a beta version to fix this, please reinstall this using yarn add react-native-zip-archive@beta to test it. If the problem is solved then I would publish it as the latest version.

[008v]

same security alert