Commit Graph

1 Commits (3c484831f87035db7eeb7ed405f905c134b56a53)

Author SHA1 Message Date
Sam Doran 8cccb33d71
[stable-2.7] win_unzip - normalize and compare paths to prevent path traversal (#67799) (#67938)
* win_unzip  - normalize and compare paths to prevent path traversal (#67799)

* Actually inspect the paths and prevent escape
* Add integration tests
* Generate zip files for use in integration test
* Adjust error message

(cherry picked from commit d30c57ab22)

* Fix tests for 2.7
5 years ago