phar: reject extractTo() when destination parent escapes via symlink#43

Closed

iliaal wants to merge 1 commit intoPHP-8.4from

fix/phar-extractto-symlink-traversal

Commits on Apr 18, 2026

phar: reject extractTo() when destination parent escapes via symlink
iliaal
committed