Nico Waisman comments

Repositories
Issues
Comments

Results 1 comments of


                                            Nico Waisman

Potential Zip Slip vulnerability on downloader.go

Here is how other people have fix this problem: https://github.com/mholt/archiver/pull/169/commits/d818164a438603f1ba3fa952c7d99321f924301c https://github.com/openshift/source-to-image/commit/f5cbcbc5cc6f8cc2f479a7302443bea407a700cb Or you could check this article: https://golangcode.com/unzip-files-in-go/ Relevant snippet: ``` // Check for ZipSlip. More Info: http://bit.ly/2MsjAWE if !strings.HasPrefix(path,...