gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` by ambv · Pull Request #135037 · python/cpython · GitHub

github.com

GitHub CopilotWrite better code with AI | MCP RegistryIntegrate external tools | ActionsAutomate any workflow | CodespacesInstant dev environments | IssuesPlan and track work | Code ReviewManage code changes | Code QualityEnforce quality at merge | Why GitHub | Marketplace | View all features | Enterprises | Small and medium teams | Startups | View all use cases | View all industries | View all solutions | AI | Software Development | DevOps | Security | View all topics | Customer stories | Events & webinars | Ebooks & reports | Business insights | Trust center | Partners | View all resources

Tin mới

GitHub CopilotWrite better code with AI

GitHub Copilot appDirect agents from issue to merge

ActionsAutomate any workflow

CodespacesInstant dev environments

IssuesPlan and track work

Code ReviewManage code changes

Code QualityEnforce quality at merge

GitHub Advanced SecurityFind and fix vulnerabilities

Code securitySecure your code as you build

Secret protectionStop leaks before they start

View all use cases

Financial services

View all industries

Software Development

GitHub SponsorsFund open source developers

Copilot for BusinessEnterprise-grade AI features

Premium SupportEnterprise-grade 24/7 support

Pull requests 2.6k

Security and quality 0

Multiple tarfile extraction filter bypasses (filter="tar"/filter="data") #135034

: Normalize link targets in tarfile, add `os.path.real…

awaiting core review

Fix test_tarfile on WASI

Remove spurious line

View reviewed changes

Fix invalid parent directory unwinding in test

Make tests more chatty

View reviewed changes

Work around Windows test failures

Add ERROR_ACCESS_DENIED

🔨 test-with-buildbots

Switch to singleton

Add ENAMETOOLONG to expected failures. And an extra subTest.

Discard more special files

Use shorter names on Android

Attempt to restore ntpath test

Revert "Attempt to restore ntpath test"

Directory Traversal SNYK-RHEL9-PYTHON3-10409385 RADAR-base/radar-helm-charts#16521

Directory Traversal SNYK-RHEL9-PYTHON3-10415394 RADAR-base/radar-helm-charts#16526

Use of Incorrectly-Resolved Name or Reference SNYK-RHEL9-PYTHON3-10415440 RADAR-base/radar-helm-charts#16529

Directory Traversal SNYK-RHEL9-PYTHON3-10415579 RADAR-base/radar-helm-charts#16530

Directory Traversal SNYK-RHEL9-PYTHON3-10415856 RADAR-base/radar-helm-charts#16535

Directory Traversal SNYK-RHEL9-PYTHON3-10409385 RADAR-base/radar-helm-charts#16539

Directory Traversal SNYK-RHEL9-PYTHON3-10415394 RADAR-base/radar-helm-charts#16542

Use of Incorrectly-Resolved Name or Reference SNYK-RHEL9-PYTHON3-10415440 RADAR-base/radar-helm-charts#16546

Directory Traversal SNYK-RHEL9-PYTHON3-10415579 RADAR-base/radar-helm-charts#16549

Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10409389 RADAR-base/radar-helm-charts#16550

Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415372 RADAR-base/radar-helm-charts#16552

Directory Traversal SNYK-RHEL9-PYTHON3-10415856 RADAR-base/radar-helm-charts#16553

Use of Incorrectly-Resolved Name or Reference SNYK-RHEL9-PYTHON3LIBS-10415418 RADAR-base/radar-helm-charts#16555

Tin khác