| Server IP : 213.136.93.164 / Your IP : 216.73.216.104 Web Server : Apache System : Linux m14200.contabo.net 5.14.0-611.54.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed May 6 18:03:03 EDT 2026 x86_64 User : ki692510 ( 1047) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /proc/self/root/opt/imunify360/venv/lib64/python3.11/site-packages/defence360agent/utils/ |
Upload File : |
import zipfile
from pathlib import Path
def safe_extractall(zf: zipfile.ZipFile, dest: Path) -> None:
dest_resolved = Path(dest).resolve()
for member in zf.namelist():
if member.startswith(("/", "\\")):
raise ValueError("Unsafe absolute zip member path: %r" % (member,))
parts = Path(member).parts
if ".." in parts:
raise ValueError(
"Unsafe parent-traversal zip member path: %r" % (member,)
)
target = (dest_resolved / member).resolve()
if target != dest_resolved and dest_resolved not in target.parents:
raise ValueError("Zip member escapes destination: %r" % (member,))
zf.extractall(dest_resolved)