Commit 5546b002 authored by Gregory P. Smith's avatar Gregory P. Smith

Issue #6972: keep the warning about untrusted extraction and mention

the version it was improved in.
parents cf6e21cc f1319d81
...@@ -260,9 +260,15 @@ ZipFile Objects ...@@ -260,9 +260,15 @@ ZipFile Objects
be a subset of the list returned by :meth:`namelist`. *pwd* is the password be a subset of the list returned by :meth:`namelist`. *pwd* is the password
used for encrypted files. used for encrypted files.
.. note:: .. warning::
Never extract archives from untrusted sources without prior inspection.
It is possible that files are created outside of *path*, e.g. members
that have absolute filenames starting with ``"/"`` or filenames with two
dots ``".."``.
See :meth:`extract` note. .. versionchanged:: 3.3.1
The zipfile module attempts to prevent that. See :meth:`extract` note.
.. method:: ZipFile.printdir() .. method:: ZipFile.printdir()
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment