test: add tests for unvalidated symlink creation in import_project

This commit is contained in:
grossmj committed 2026-07-29 18:48:31 +02:00
1 parent a225622a6e
commit b797981a65
2 files changed
+76 -28

No files matched your search

+5 -1
View File
@@ -169,7 +169,11 @@ async def import_project(
def _create_symbolic_links(zip_file, path):
"""
Materialise symlink entries, refusing any target that escapes `path`.
Manually create symbolic links (if any) because ZipFile does not support it.
Refuse any target that escapes `path`.
:param zip_file: ZipFile instance
:param path: project location
"""
path_root = os.path.realpath(path) + os.sep