Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents cf6e21c + f1319d8 commit 5546b00Copy full SHA for 5546b00
1 file changed
Doc/library/zipfile.rst
@@ -260,9 +260,15 @@ ZipFile Objects
260
be a subset of the list returned by :meth:`namelist`. *pwd* is the password
261
used for encrypted files.
262
263
- .. note::
+ .. warning::
264
+
265
+ Never extract archives from untrusted sources without prior inspection.
266
+ It is possible that files are created outside of *path*, e.g. members
267
+ that have absolute filenames starting with ``"/"`` or filenames with two
268
+ dots ``".."``.
269
- See :meth:`extract` note.
270
+ .. versionchanged:: 3.3.1
271
+ The zipfile module attempts to prevent that. See :meth:`extract` note.
272
273
274
.. method:: ZipFile.printdir()
0 commit comments