Release v1.4.26 with remaining bug audit fixes

- AllDebrid: add HTML response detection to unrestrictLink
- Cleanup: skip symlinks/junctions in all directory traversals
- Blob URL: increase revoke delay from 0ms to 60s
- Extractor: per-package progress file to prevent collision
- ADD_CONTAINERS: reject path traversal and relative paths

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Sucukdeluxe
2026-02-28 13:09:59 +01:00
co-authored by Claude Opus 4.6
parent 06a272ccbd
commit cbc423e4b7
7 changed files with 200 additions and 92 deletions
+2
View File
@@ -3175,6 +3175,7 @@ export class DownloadManager extends EventEmitter {
signal,
onlyArchives: readyArchives,
skipPostCleanup: true,
packageId,
onProgress: (progress) => {
if (progress.phase === "done") {
return;
@@ -3312,6 +3313,7 @@ export class DownloadManager extends EventEmitter {
removeSamples: this.settings.removeSamplesAfterExtract,
passwordList: this.settings.archivePasswordList,
signal: extractAbortController.signal,
packageId,
onProgress: (progress) => {
const label = progress.phase === "done"
? "Entpacken 100%"