Message214093
| Author |
r.david.murray |
| Recipients |
docs@python, eric.araujo, peter@psantoro.net, pitrou, r.david.murray |
| Date |
2014年03月19日.13:19:05 |
| SpamBayes Score |
-1.0 |
| Marked as misclassified |
Yes |
| Message-id |
<1395235145.5.0.178866776252.issue20907@psf.upfronthosting.co.za> |
| In-reply-to |
| Content |
First step would be to get rid of the warning in the zipfile docs and replace it with the info that the absolute path '/' and any relative path are stripped silently before the file is extracted.
It would also be worth adding an enhancement to zipfile to optionally not do it silently.
I hope the same considerations apply to tarfile, but I haven't checked.
In other words, I do think that code is a holdover from when zipfile *wasn't* safe, but since I didn't write it I don't know for sure. |
|