Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall
Add API for allowing checks on the content of tar files, allowing callers to mitigate directory traversal (CVE-2007-4559) and related issues. Python 3.12 will warn if this API is not used. Python 3.14 will fail if it's not used. RHEL adds configuration options, by default it will warn and fail like 3.14 upstream. Backport from python#102950 Change document: https://peps.python.org/pep-0706/
- Loading branch information