避免存在文件链接,导致真实文件被打包

ref http://drops.wooyun.org/papers/4762
This commit is contained in:
virusdefender 2016-05-09 20:55:42 +08:00
parent 7350b334c9
commit 40573615ec
No known key found for this signature in database
GPG Key ID: 1686FB5677979E61

View File

@ -374,7 +374,8 @@ class TestCaseDownloadAPIView(APIView):
zf = zipfile.ZipFile(test_case_zip, "w", zipfile.ZIP_DEFLATED) zf = zipfile.ZipFile(test_case_zip, "w", zipfile.ZIP_DEFLATED)
for filename in os.listdir(test_case_dir): for filename in os.listdir(test_case_dir):
if self._is_legal_test_case_file_name(filename): # 避免存在文件链接,导致真实文件被打包
if self._is_legal_test_case_file_name(filename) and not os.path.islink(os.path.join(test_case_dir, filename)):
zf.write(os.path.join(test_case_dir, filename), filename) zf.write(os.path.join(test_case_dir, filename), filename)
zf.close() zf.close()