Skip to content

Commit

Permalink
black
Browse files Browse the repository at this point in the history
  • Loading branch information
neteler committed Oct 3, 2023
1 parent 0f4b8cb commit b1e0a8f
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions src/imagery/i.landsat/i.landsat.import/i.landsat.import.py
Original file line number Diff line number Diff line change
Expand Up @@ -156,6 +156,7 @@ def _untar(inputdir, untardir):

for scene in scenes_to_untar:
with tarfile.open(name=scene, mode="r") as tar:

def is_within_directory(directory, target):

abs_directory = os.path.abspath(directory)
Expand All @@ -166,15 +167,13 @@ def is_within_directory(directory, target):
return prefix == abs_directory

def safe_extract(tar, path=".", members=None, *, numeric_owner=False):

for member in tar.getmembers():
member_path = os.path.join(path, member.name)
if not is_within_directory(path, member_path):
raise Exception("Attempted Path Traversal in Tar File")

tar.extractall(path, members, numeric_owner=numeric_owner)


safe_extract(tar, untardir)

untared_tifs = glob.glob(os.path.join(untardir, "*.TIF"))
Expand Down

0 comments on commit b1e0a8f

Please sign in to comment.