Make PowerPoint import reliable in the App Store sandbox

[f]

Summary

Copy a user-selected PowerPoint file into Textream’s own temporary directory before invoking the system unzip tool. This preserves the security-scoped read in the app process and makes presenter-note import reliable under the Mac App Store sandbox.

Verification

• App Store configuration builds successfully for arm64 and x86_64
• generated PPTX presenter-note fixture imports successfully
• Developer ID-signed sandbox test app imports the bundled PPTX successfully
• git diff --check

Prepared with Codex assistance; reviewed and submitted by Fatih.

[Copilot]

Pull request overview

Improves PPTX presenter-notes import reliability under the Mac App Store sandbox by ensuring the user-selected archive is first copied into Textream’s own temporary directory before invoking the unzip child process.

Changes:

• Copy the selected .pptx into a temporary directory owned by the app process.
• Update the unzip invocation to operate on the copied archive instead of the original security-scoped URL.

Suppressed comments (1)

Textream/Textream/PresentationNotesExtractor.swift:62

• Using /usr/bin/unzip on a user-selected PPTX without validating archive entry paths can allow “zip slip” path traversal (e.g. ../) and/or symlink tricks, potentially writing files outside the intended extraction directory. Consider switching to a ZIP extraction approach that normalizes each entry path and enforces that the destination stays within the extraction root (or at minimum, validate extracted paths and reject archives with unsafe entries).

        // Unzip using Process
        let process = Process()
        process.executableURL = URL(fileURLWithPath: "/usr/bin/unzip")
        process.arguments = ["-o", "-q", localArchive.path, "-d", tempDir.path]

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.