This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
tl;dr i found that when macOS’s Archive Utility extracts a ZIP archive containing symlinks, the symlinks themselves do not inherit the com.apple.quarantine extended attribute. when a user executes the symlink, Gatekeeper checks the symlink’s quarantine status (absent) rather than resolving the symlink and checking the target’s status (present). this allows unsigned/un-notarized…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.