python / python/cpython

permissions too restrictive in zipfile.writestr

Open
#83,067 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

3.11 stdlib type-feature
Dominant language
Python
Stars
77.2k
Forks
36k
PR merge metrics
PR metrics pending

Description

BPO 38886
Nosy @raphaeldussin, @iritkatriel
PRs
  • python/cpython#17327
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2019-11-21.20:01:41.811>
    labels = ['type-feature', 'library', '3.11']
    title = 'permissions too restrictive in zipfile.writestr'
    updated_at = <Date 2022-01-24.23:10:17.506>
    user = 'https://github.com/raphaeldussin'
    

    bugs.python.org fields:

    activity = <Date 2022-01-24.23:10:17.506>
    actor = 'iritkatriel'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['Library (Lib)']
    creation = <Date 2019-11-21.20:01:41.811>
    creator = 'rdussin'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 38886
    keywords = ['patch']
    message_count = 2.0
    messages = ['357210', '411527']
    nosy_count = 2.0
    nosy_names = ['rdussin', 'iritkatriel']
    pr_nums = ['17327']
    priority = 'normal'
    resolution = None
    stage = 'patch review'
    status = 'open'
    superseder = None
    type = 'enhancement'
    url = 'https://bugs.python.org/issue38886'
    versions = ['Python 3.11']
    

    Contributor guide

    Open the contributing guide

    First steps

    1. Read the whole issue, then the project's contributing guide.
    2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
    3. Fork the repository and make your change on a branch.
    4. Open a pull request that references the issue number.

    Research direction

    Start at the zipfile.writestr entry point and determine which permissions are currently produced and what less-restrictive behavior the issue requires. The payload names no files or tests and gives no acceptance criteria, so completion cannot be verified from the issue alone; also review the historical PR 17327 before starting.

    Written by the indexing model from the issue text.

    Assessment

    Tech stack
    python
    Domain
    backend
    Issue type
    Feature
    Difficulty
    3/5
    Estimated time
    1-2 days
    Activity status
    Stale
    Clarity
    Needs clarification
    Newbie friendliness
    25/100

    Get new issues in your inbox

    A short digest of beginner-friendly GitHub issues.