René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"zipfile.ZipFile overwrites files outside destination path","articleBody":"BPO | [6972](https://bugs.python.org/issue6972)\n--- | :---\nNosy | @loewis, @birkenfeld, @gpshead, @amauryfa, @larryhastings, @benjaminp, @ned-deily, @bitdancer, @serhiy-storchaka\nFiles | \u003cli\u003e[extract-doc.diff](https://bugs.python.org/file15004/extract-doc.diff \"Uploaded as text/plain at 2009-09-29.22:36:23 by twb\"): Update to extract() method documentation\u003c/li\u003e\u003cli\u003e[zipfile-6972-test.diff](https://bugs.python.org/file15005/zipfile-6972-test.diff \"Uploaded as text/plain at 2009-09-30.06:14:00 by twb\"): test for directory escape\u003c/li\u003e\u003cli\u003e[zipfile-6972-patch-2.diff](https://bugs.python.org/file15009/zipfile-6972-patch-2.diff \"Uploaded as text/plain at 2009-09-30.19:29:49 by twb\"): patch to zipfile module for directory escape, with fix for case sensitive file systems\u003c/li\u003e\u003cli\u003e[zipfile_fix_arcname_3.patch](https://bugs.python.org/file27686/zipfile_fix_arcname_3.patch \"Uploaded as text/plain at 2012-10-23.18:19:18 by @serhiy-storchaka\"): Strip leading absolute name part and \"..\" components\u003c/li\u003e\u003cli\u003e[zipfile_fix_arcname_4-2.7.patch](https://bugs.python.org/file28932/zipfile_fix_arcname_4-2.7.patch \"Uploaded as text/plain at 2013-02-02.13:20:40 by @serhiy-storchaka\")\u003c/li\u003e\u003cli\u003e[zipfile_fix_arcname_4-3.x.patch](https://bugs.python.org/file28933/zipfile_fix_arcname_4-3.x.patch \"Uploaded as text/plain at 2013-02-02.13:20:41 by @serhiy-storchaka\")\u003c/li\u003e\n\n\u003csup\u003e*Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.*\u003c/sup\u003e\n\n\u003cdetails\u003e\u003csummary\u003eShow more details\u003c/summary\u003e\u003cp\u003e\n\nGitHub fields:\n```python\nassignee = 'https://github.com/serhiy-storchaka'\nclosed_at = \u003cDate 2013-02-08.06:19:09.044\u003e\ncreated_at = \u003cDate 2009-09-22.22:10:50.564\u003e\nlabels = ['type-security', 'library', 'release-blocker']\ntitle = 'zipfile.ZipFile overwrites files outside destination path'\nupdated_at = \u003cDate 2013-02-08.20:04:05.696\u003e\nuser = 'https://bugs.python.org/schmir'\n```\n\nbugs.python.org fields:\n```python\nactivity = \u003cDate 2013-02-08.20:04:05.696\u003e\nactor = 'Arfrever'\nassignee = 'serhiy.storchaka'\nclosed = True\nclosed_date = \u003cDate 2013-02-08.06:19:09.044\u003e\ncloser = 'gregory.p.smith'\ncomponents = ['Library (Lib)']\ncreation = \u003cDate 2009-09-22.22:10:50.564\u003e\ncreator = 'schmir'\ndependencies = []\nfiles = ['15004', '15005', '15009', '27686', '28932', '28933']\nhgrepos = []\nissue_num = 6972\nkeywords = ['patch', 'needs review']\nmessage_count = 50.0\nmessages = ['93021', '93251', '93268', '93269', '93278', '93305', '93330', '93331', '93332', '93333', '93334', '93336', '93349', '93372', '93374', '93375', '93376', '93379', '93380', '93381', '93382', '93396', '93420', '93426', '157763', '157778', '157789', '173526', '173567', '173630', '180681', '181055', '181072', '181102', '181106', '181134', '181158', '181159', '181161', '181162', '181163', '181166', '181171', '181178', '181183', '181188', '181244', '181646', '181647', '181659']\nnosy_count = 14.0\nnosy_names = ['loewis', 'georg.brandl', 'gregory.p.smith', 'amaury.forgeotdarc', 'larry', 'schmir', 'benjamin.peterson', 'ned.deily', 'Arfrever', 'r.david.murray', 'twb', 'catalin.iacob', 'python-dev', 'serhiy.storchaka']\npr_nums = []\npriority = 'release blocker'\nresolution = 'fixed'\nstage = 'resolved'\nstatus = 'closed'\nsuperseder = None\ntype = 'security'\nurl = 'https://bugs.python.org/issue6972'\nversions = ['Python 2.7', 'Python 3.2', 'Python 3.3', 'Python 3.4']\n```\n\n\u003c/p\u003e\u003c/details\u003e\n","author":{"url":"https://github.com/schmir","@type":"Person","name":"schmir"},"datePublished":"2009-09-22T22:10:51.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":50},"url":"https://github.com/51221/cpython/issues/51221"}