mirror of
https://github.com/Abdess/retrobios.git
synced 2026-06-20 02:42:47 +00:00
chore: add MAME and RetroDECK ROM sets
This commit is contained in:
parent
1fcb948a00
commit
6ee162f8fb
1532 changed files with 25092 additions and 1089 deletions
|
|
@ -116,7 +116,9 @@ def get_remote_sha(source_url: str, version: str) -> str | None:
|
|||
|
||||
|
||||
def _is_safe_tar_member(member: tarfile.TarInfo, dest: Path) -> bool:
|
||||
"""Reject path traversal and absolute paths in tar members."""
|
||||
"""Reject path traversal, absolute paths, and symlinks in tar members."""
|
||||
if member.issym() or member.islnk():
|
||||
return False
|
||||
if member.name.startswith("/") or ".." in member.name.split("/"):
|
||||
return False
|
||||
resolved = (dest / member.name).resolve()
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue