Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit a05318f

Browse files
Update zipslip_good.py
1 parent 1836723 commit a05318f

1 file changed

Lines changed: 5 additions & 11 deletions

File tree

python/ql/test/experimental/query-tests/Security/CWE-022/zipslip_good.py

Lines changed: 5 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -3,18 +3,12 @@
33
import shutil
44

55
def unzip(filename, dir):
6-
zf = zipfile.ZipFile(filename)
7-
zf.extractall(dir)
6+
zf = zipfile.ZipFile(filename)
7+
zf.extractall(dir)
88

99

1010
def unzip1(filename, dir):
11-
zf = zipfile.ZipFile(filename)
12-
zf.extract(dir)
11+
zf = zipfile.ZipFile(filename)
12+
zf.extract(dir)
1313

14-
def unzip2(filename):
15-
with tarfile.open(filename) as tar:
16-
for entry in tar:
17-
#GOOD: Check that entry is safe
18-
if os.path.isabs(entry.name) or ".." in entry.name:
19-
raise ValueError("Illegal tar archive entry")
20-
shutil.copy(entry, "/tmp/unpack/")
14+

0 commit comments

Comments
 (0)