Skip to content

Commit

Permalink
merge
Browse files Browse the repository at this point in the history
  • Loading branch information
Seroxdesign committed Jun 28, 2024
1 parent 69ace91 commit 3ad020e
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions wallets/metamask/src/fixture-actions/noCachMetaMaskSetup.ts
Original file line number Diff line number Diff line change
Expand Up @@ -45,8 +45,7 @@ async function unzipArchive(archivePath: string): Promise<void> {
stream.on(
'entry',
async (entry: { path: string; type: string; pipe: (arg: unknown) => void; autodrain: () => void }) => {
const normalizedPath = path.resolve(archivePath, entry.path)
const fileName = normalizedPath
const fileName = entry.path

Check failure

Code scanning / CodeQL

Arbitrary file access during archive extraction ("Zip Slip") High

Unsanitized archive entry, which may contain '..', is used in a
file system operation
.
const type = entry.type as 'Directory' | 'File'

if (type === 'Directory') {
Expand Down

0 comments on commit 3ad020e

Please sign in to comment.