➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author serhiy.storchaka
Recipients Henning.von.Bargen, serhiy.storchaka, zaphodef
Date 2021-09-25.17:47:38
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1632592058.2.0.955663076098.issue37921@roundup.psfhosted.org>
In-reply-to
Content 
Adding support of symlinks in ZIP files will make the zipfile module vulnerable to symlink attacks like like with TAR files (see https://en.wikipedia.org/wiki/Tar_(computing)#Duplicates). Until we find a solution to this, adding support of symlinks is dangerous.
History
Date User Action Args
2021-09-25 17:47:38serhiy.storchakasetrecipients: + serhiy.storchaka, Henning.von.Bargen, zaphodef
2021-09-25 17:47:38serhiy.storchakasetmessageid: <1632592058.2.0.955663076098.issue37921@roundup.psfhosted.org>
2021-09-25 17:47:38serhiy.storchakalinkissue37921 messages
2021-09-25 17:47:38serhiy.storchakacreate