Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1836723 commit a05318fCopy full SHA for a05318f
1 file changed
python/ql/test/experimental/query-tests/Security/CWE-022/zipslip_good.py
@@ -3,18 +3,12 @@
3
import shutil
4
5
def unzip(filename, dir):
6
- zf = zipfile.ZipFile(filename)
7
- zf.extractall(dir)
+ zf = zipfile.ZipFile(filename)
+ zf.extractall(dir)
8
9
10
def unzip1(filename, dir):
11
12
- zf.extract(dir)
+ zf.extract(dir)
13
14
-def unzip2(filename):
15
- with tarfile.open(filename) as tar:
16
- for entry in tar:
17
- #GOOD: Check that entry is safe
18
- if os.path.isabs(entry.name) or ".." in entry.name:
19
- raise ValueError("Illegal tar archive entry")
20
- shutil.copy(entry, "/tmp/unpack/")
+
0 commit comments