Merge branch 'master' into frontier

这个提交包含在:
binary-husky
2025-02-13 00:20:16 +08:00
当前提交 31e3ffd997
共有 15 个文件被更改,包括 296 次插入104 次删除

查看文件

@@ -111,6 +111,8 @@ def extract_archive(file_path, dest_dir):
member_path = os.path.normpath(member.name)
full_path = os.path.join(dest_dir, member_path)
full_path = os.path.abspath(full_path)
if member.islnk() or member.issym():
raise Exception(f"Attempted Symlink in {member.name}")
if not full_path.startswith(os.path.abspath(dest_dir) + os.sep):
raise Exception(f"Attempted Path Traversal in {member.name}")