feat: Synchronize the V20 security vulnerability fix to V25#411

Merged

deepin-bot[bot] merged 2 commits into

linuxdeepin:masterfrom

LiHua000:master

May 19, 2026

Commits on May 19, 2026

fix(security): harden symlink target validation during extraction
LiHua000
committed
fix(security): allow symlink creation, check path escape only during file writes (#381)
LiHua000
committed