zip_slip

Util.java中的copyToFile()解压文件时，未校验zip条目名，当条目名中带有../时(可能时攻击者恶意构造的)，可能会覆盖其他铭感文件

Start in Util.java at copyToFile(), where ZIP entries are extracted, and inspect how entry names are combined with the destination path. Reproduce the issue with an entry containing ../ and verify that extraction cannot write outside the intended directory. Done means traversal entries are safely rejected or contained without overwriting unrelated files.

Written by the indexing model from the issue text.