test(file): fix safe_extract()

brsynth · Dec 7, 2023 · f8dbe01 · f8dbe01
1 parent 984d706
commit f8dbe01
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/brs_utils/file.py b/brs_utils/file.py
@@ -251,7 +251,12 @@ def safe_extract(tar, path=".", members=None, *, numeric_owner=False):
         if not is_within_directory(path, member_path):
             raise Exception("Attempted Path Traversal in Tar File")
 
-    tar.extractall(path, members, numeric_owner=numeric_owner) 
+    if members:
+        _members = [x for x in tar.getmembers() if x.name in members]
+    else:
+        _members = None
+
+    tar.extractall(path, _members, numeric_owner=numeric_owner) 
 
 
 def extract_tar_gz(