Skip to content

Commit c22c0b5

Browse files
Update python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.qhelp
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
1 parent a5849eb commit c22c0b5

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ In this example an archive is extracted without validating file paths.
4040
<sample src="examples/HIT_UnsafeUnpack.py" />
4141

4242
<p>To fix this vulnerability, we need to call the function <code>tarfile.extract()</code>
43-
on each <code>member</code> after verifying that it does not contain either `..` or startswith `/`.
43+
on each <code>member</code> after verifying that it does not contain either <code>..</code> or startswith <code>/</code>.
4444
</p>
4545

4646
<sample src="examples/NoHIT_UnsafeUnpack.py" />

0 commit comments

Comments
 (0)