Files
codeql/javascript/ql/test/query-tests/Security/CWE-022/ZipSlip/ZipSlipBad2.js
2025-02-28 13:29:30 +01:00

9 lines
304 B
JavaScript

var fs = require('fs');
var unzip = require('unzip');
fs.readFile('path/to/archive.zip', function (err, zipContents) {
unzip.Parse(zipContents).on('entry', function (entry) {
var fileName = 'output/path/' + entry.path; // $ Alert
fs.writeFileSync(fileName, entry.contents); // $ Sink
});
});