diff options
author | Alex Pilon <apilon@hashicorp.com> | 2019-02-22 18:24:37 -0500 |
---|---|---|
committer | Alex Pilon <apilon@hashicorp.com> | 2019-02-22 18:24:37 -0500 |
commit | 15c0b25d011f37e7c20aeca9eaf461f78285b8d9 (patch) | |
tree | 255c250a5c9d4801c74092d33b7337d8c14438ff /vendor/github.com/hashicorp/go-getter/decompress_zip.go | |
parent | 07971ca38143c5faf951d152fba370ddcbe26ad5 (diff) | |
download | terraform-provider-statuscake-15c0b25d011f37e7c20aeca9eaf461f78285b8d9.tar.gz terraform-provider-statuscake-15c0b25d011f37e7c20aeca9eaf461f78285b8d9.tar.zst terraform-provider-statuscake-15c0b25d011f37e7c20aeca9eaf461f78285b8d9.zip |
deps: github.com/hashicorp/terraform@sdk-v0.11-with-go-modules
Updated via: go get github.com/hashicorp/terraform@sdk-v0.11-with-go-modules and go mod tidy
Diffstat (limited to 'vendor/github.com/hashicorp/go-getter/decompress_zip.go')
-rw-r--r-- | vendor/github.com/hashicorp/go-getter/decompress_zip.go | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/vendor/github.com/hashicorp/go-getter/decompress_zip.go b/vendor/github.com/hashicorp/go-getter/decompress_zip.go index a065c07..b0e70ca 100644 --- a/vendor/github.com/hashicorp/go-getter/decompress_zip.go +++ b/vendor/github.com/hashicorp/go-getter/decompress_zip.go | |||
@@ -42,6 +42,11 @@ func (d *ZipDecompressor) Decompress(dst, src string, dir bool) error { | |||
42 | for _, f := range zipR.File { | 42 | for _, f := range zipR.File { |
43 | path := dst | 43 | path := dst |
44 | if dir { | 44 | if dir { |
45 | // Disallow parent traversal | ||
46 | if containsDotDot(f.Name) { | ||
47 | return fmt.Errorf("entry contains '..': %s", f.Name) | ||
48 | } | ||
49 | |||
45 | path = filepath.Join(path, f.Name) | 50 | path = filepath.Join(path, f.Name) |
46 | } | 51 | } |
47 | 52 | ||