Files
codeql/javascript/ql/test/query-tests/Security/CWE-022/ZipSlip/ZipSlipGoodBasename.js
2019-03-06 09:46:41 +00:00

11 lines
302 B
JavaScript

const fs = require('fs');
const unzip = require('unzip');
const path = require('path');
fs.createReadStream('archive.zip')
.pipe(unzip.Parse())
.on('entry', entry => {
const fileName = entry.path;
entry.pipe(fs.createWriteStream(path.join('my_directory', path.basename(fileName))));
});