Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork33.3k
Open
Description
Thezipfile andtarfile modules both are used to processpotentially untrusted inputs from the internet, most relevantly through Python packaging. zipfile and tarfile have security-focused settings to allow unpacking archives into specific directories with the expectation that the contents only affect the directory being unpacked into and not other directories. This gives an easy target to evaluate, whether the filesystem beyond the target directory is modified.