Files
codeql/javascript/ql/test/query-tests/Security/CWE-022/ZipSlip/ZipSlipGood.js
2019-02-28 15:46:14 -05:00

15 lines
345 B
JavaScript

const fs = require('fs');
const unzip = require('unzip');
fs.createReadStream('archive.zip')
.pipe(unzip.Parse())
.on('entry', entry => {
const fileName = entry.path;
if (fileName.indexOf('..') == -1) {
entry.pipe(fs.createWriteStream(fileName));
}
else {
console.log('skipping bad path', fileName);
}
});