| Server IP : 198.38.94.67 / Your IP : 216.73.217.142 Web Server : LiteSpeed System : Linux d6054.dxb1.stableserver.net 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64 User : azfilmst ( 1070) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/utils/ |
Upload File : |
import zipfile
from pathlib import Path
def safe_extractall(zf: zipfile.ZipFile, dest: Path) -> None:
dest_resolved = Path(dest).resolve()
for member in zf.namelist():
if member.startswith(("/", "\\")):
raise ValueError("Unsafe absolute zip member path: %r" % (member,))
parts = Path(member).parts
if ".." in parts:
raise ValueError(
"Unsafe parent-traversal zip member path: %r" % (member,)
)
target = (dest_resolved / member).resolve()
if target != dest_resolved and dest_resolved not in target.parents:
raise ValueError("Zip member escapes destination: %r" % (member,))
zf.extractall(dest_resolved)