2
0
forked from Wavyzz/dolibarr
This commit is contained in:
Laurent Destailleur
2023-05-11 02:04:25 +02:00
parent a22a83827a
commit f59987af77
12 changed files with 14 additions and 14 deletions

View File

@@ -2321,7 +2321,7 @@ function dol_uncompress($inputfile, $outputdir)
$res = $zip->open($inputfile);
if ($res === true) {
//$zip->extractTo($outputdir.'/');
// We must extract one file at time so we can check that file name does not contains '..' to avoid transversal path of zip built for example using
// We must extract one file at time so we can check that file name does not contain '..' to avoid transversal path of zip built for example using
// python3 path_traversal_archiver.py <Created_file_name> test.zip -l 10 -p tmp/
// with -l is the range of dot to go back in path.
// and path_traversal_archiver.py found at https://github.com/Alamot/code-snippets/blob/master/path_traversal/path_traversal_archiver.py