It would be great to merge this changes into master:
1a0420b

At moment export for vendor packages is not working.
For example we have messages with group vendor/package in DB.
After applying $group = basename("vendor/package") $group will be package.
Messages for group package will not be found in DB and $vendor will be false

Hi @barryvdh , is there an outstanding reason this cannot be merged? I'm happy to put together a PR with any relevant changes 👍

Yes this was a security issue to prevent path traversal. Maybe we can fix it another way though.

Thanks for the prompt reply @barryvdh ! any chance you could explain the relevance of files changed in #417 , I don't get the connection 😅

Are you also able to demonstrate (explain) the "path traversal" vulnerability? I'm happy to suggest a solution, but currently don't know how to replicate/test the vulnerability