diff options
| author | Gregory P. Smith <greg@mad-scientist.com> | 2009-09-29 21:58:48 (GMT) |
|---|---|---|
| committer | Gregory P. Smith <greg@mad-scientist.com> | 2009-09-29 21:58:48 (GMT) |
| commit | 61df9e50ced8caf3a683ed4cad3896accde8964c (patch) | |
| tree | 0df33bde89b2daedd3247e2bd678a087fd5b7acd /Doc | |
| parent | c9d113bf61420028b2e87422752e8632b83a109e (diff) | |
| download | cpython-61df9e50ced8caf3a683ed4cad3896accde8964c.zip cpython-61df9e50ced8caf3a683ed4cad3896accde8964c.tar.gz cpython-61df9e50ced8caf3a683ed4cad3896accde8964c.tar.bz2 | |
Merged revisions 75149 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk
........
r75149 | gregory.p.smith | 2009-09-29 14:56:31 -0700 (Tue, 29 Sep 2009) | 3 lines
Mention issue6972 in extractall docs about overwriting things outside of
the supplied path.
........
Diffstat (limited to 'Doc')
| -rw-r--r-- | Doc/library/zipfile.rst | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/Doc/library/zipfile.rst b/Doc/library/zipfile.rst index d282a55..9300e05 100644 --- a/Doc/library/zipfile.rst +++ b/Doc/library/zipfile.rst @@ -205,6 +205,13 @@ ZipFile Objects be a subset of the list returned by :meth:`namelist`. *pwd* is the password used for encrypted files. + .. warning:: + + Never extract archives from untrusted sources without prior inspection. + It is possible that files are created outside of *path*, e.g. members + that have absolute filenames starting with ``"/"`` or filenames with two + dots ``".."``. + .. versionadded:: 2.6 |