Skip to content
#

zip

Here are 912 public repositories matching this topic...

coolaj86
coolaj86 commented Sep 29, 2020

I was able to confirm that os.Create() will happily follow symlinks.

Although standard tools like tar will not likely allow you to add two files with the same name to an archive file, it's certainly easy enough to do in code. This means that we need to add an additional check before writing to a destination to make sure that it's not a symlink outside of the destination.

The vulnerab

🔍NEW ugrep v3.3: ultra fast grep with interactive query UI and fuzzy search: search file systems, source code, text, binary files, archives (cpio/tar/pax/zip), compressed files (gz/Z/bz2/lzma/xz/lz4/zstd), documents and more. A faster, user-friendly and compatible grep replacement.

  • Updated Jun 3, 2021
  • C++

Improve this page

Add a description, image, and links to the zip topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the zip topic, visit your repo's landing page and select "manage topics."

Learn more