feedc0de/platformio-core
1
0
Fork 0
forked from platformio/platformio-core
Code Pull Requests Activity

Temporary disable security checking for Tar items

Browse Source
This commit is contained in:
Ivan Kravets
2019-10-24 15:39:41 +03:00
parent 0b500dba54
commit 69d9438c71
1 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
platformio/unpacker.py
View File

@ -73,19 +73,19 @@ class TARArchive(ArchiveBase):
base=self.resolve_path(os.path.join(base, os.path.dirname(tarinfo.name))),
)
def extract_item(self, item, dest_dir):
bad_conds = [
self.is_link(item) and self.is_bad_link(item, dest_dir),
not self.is_link(item) and self.is_bad_path(item.name, dest_dir),
]
if not any(bad_conds):
super(TARArchive, self).extract_item(item, dest_dir)
else:
click.secho(
"Blocked insecure item `%s` from archive" % item.name,
fg="red",
err=True,
)
# def extract_item(self, item, dest_dir):
# bad_conds = [
# self.is_link(item) and self.is_bad_link(item, dest_dir),
# not self.is_link(item) and self.is_bad_path(item.name, dest_dir),
# ]
# if not any(bad_conds):
# super(TARArchive, self).extract_item(item, dest_dir)
# else:
# click.secho(
# "Blocked insecure item `%s` from archive" % item.name,
# fg="red",
# err=True,
# )
class ZIPArchive(ArchiveBase):