Update zipslip_bad.py

ahmed-farid-dev · web-flow · commit b9b52d4c7c0e · 2022-03-07T00:02:50.000+01:00
diff --git a/python/ql/src/experimental/Security/CWE-022/zipslip_bad.py b/python/ql/src/experimental/Security/CWE-022/zipslip_bad.py
@@ -1,9 +1,9 @@
 import zipfile
 import shutil
 
+def unzip(filename):
 
-zf = zipfile.ZipFile(filename)
-with zf.open() as zipf:
+   with zipfile.ZipFile(filename) as zipf:
     #BAD : This could write any file on the filesystem.
-    for entry in zipf:
-       shutil.copy(entry, "/tmp/unpack/")
+      for entry in zipf:
+          shutil.copy(entry, "/tmp/unpack/")
