Commit f1319d81 authored by Gregory P. Smith's avatar Gregory P. Smith

Issue #6972: keep the warning about untrusted extraction and mention

the version it was improved in.
parent d03f467d
......@@ -232,9 +232,15 @@ ZipFile Objects
be a subset of the list returned by :meth:`namelist`. *pwd* is the password
used for encrypted files.
.. note::
.. warning::
Never extract archives from untrusted sources without prior inspection.
It is possible that files are created outside of *path*, e.g. members
that have absolute filenames starting with ``"/"`` or filenames with two
dots ``".."``.
See :meth:`extract` note.
.. versionchanged:: 3.2.4
The zipfile module attempts to prevent that. See :meth:`extract` note.
.. method:: ZipFile.printdir()
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment