3 ms·

I have to say that using an archive format with this feature set for source distribution or really anything but backups makes me uneasy. When I unzip some file

by im3w1l 4y ago

I have to say that using an archive format with this feature set for source distribution or really anything but backups makes me uneasy. When I unzip some file from the internet I dont want it putting files owned by some random uid in ../../. Like what if dogpictures.tar.gz contains a ../.bashrc. Untar from $USER/Downloads and whoops..

tpoacher 4y ago
wait, is that a thing with tar??? EDIT: nevermind, I read the actual article. This only happens if you explicitly tell it to with the -P flag.
- stabbles 4y ago
  You'll be happy to learn that Python's builtin tarfile module extracts and overwrites `../parent/paths` and `/absolute/paths` at those locations. Never use Python.
- im3w1l 4y ago
  Ah, you are right. I can't believe my eyes skipped over that.