add a comment

2023-01-06 14:42:14 +05:30 · 2023-01-06 14:42:14 +05:30 · 2205bf4426
commit 2205bf4426
parent def35078d1
1 changed files with 1 additions and 0 deletions
--- a/kitty/utils.py
+++ b/kitty/utils.py
@ -1107,6 +1107,7 @@ def sanitize_url_for_dispay_to_user(url: str) -> str:


 def extract_all_from_tarfile_safely(tf: 'tarfile.TarFile', dest: str) -> None:
+    # Ensure that all extracted items are within dest

    def is_within_directory(directory: str, target: str) -> bool:
        abs_directory = os.path.abspath(directory)