Skip to content

Harden summary table tar extraction#640

Closed
resolvicomai wants to merge 1 commit into
huggingface:mainfrom
resolvicomai:fix/safe-summary-tar-extract
Closed

Harden summary table tar extraction#640
resolvicomai wants to merge 1 commit into
huggingface:mainfrom
resolvicomai:fix/safe-summary-tar-extract

Conversation

@resolvicomai
Copy link
Copy Markdown

Summary

  • Validate tar members before extracting summary-table result archives.
  • Reject absolute paths, parent-directory traversal, drive-qualified Windows paths, and non-file/directory members.
  • Add focused tests for unsafe and safe archive members.

Validation

  • uv run --no-project --with pytest --with numpy --with scipy pytest -q --noconftest -o addopts='' tests/test_create_summary_table.py
  • uv run --no-project --with flake8 flake8 scripts/create_summary_table.py tests/test_create_summary_table.py
  • python3 -m py_compile scripts/create_summary_table.py tests/test_create_summary_table.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant