python / python/cpython

permissions too restrictive in zipfile.writestr

未关闭
#83,067 2 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

3.11 stdlib type-feature
主要语言
Python
星标
77.2k
派生
36k
PR 合并指标
PR 指标待抓取

描述

BPO 38886
Nosy @raphaeldussin, @iritkatriel
PRs
  • python/cpython#17327
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2019-11-21.20:01:41.811>
    labels = ['type-feature', 'library', '3.11']
    title = 'permissions too restrictive in zipfile.writestr'
    updated_at = <Date 2022-01-24.23:10:17.506>
    user = 'https://github.com/raphaeldussin'
    

    bugs.python.org fields:

    activity = <Date 2022-01-24.23:10:17.506>
    actor = 'iritkatriel'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['Library (Lib)']
    creation = <Date 2019-11-21.20:01:41.811>
    creator = 'rdussin'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 38886
    keywords = ['patch']
    message_count = 2.0
    messages = ['357210', '411527']
    nosy_count = 2.0
    nosy_names = ['rdussin', 'iritkatriel']
    pr_nums = ['17327']
    priority = 'normal'
    resolution = None
    stage = 'patch review'
    status = 'open'
    superseder = None
    type = 'enhancement'
    url = 'https://bugs.python.org/issue38886'
    versions = ['Python 3.11']
    

    贡献指南

    打开贡献指南

    从这里开始

    1. 先读完整个 Issue,再读项目的贡献指南。
    2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
    3. Fork 仓库,在一个分支上完成修改。
    4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

    调研方向

    从 zipfile.writestr 入口点开始,确定当前生成了哪些权限,以及 issue 要求采用什么限制更少的行为。payload 没有指明任何文件或测试,也没有提供验收标准,因此无法仅根据 issue 验证是否完成;开始之前还要查看历史 PR 17327。

    由索引模型根据 Issue 内容生成。

    评估

    技术栈
    python
    领域
    backend
    Issue 类型
    功能
    难度
    3/5
    预计耗时
    1-2 天
    活跃度
    停滞
    描述清晰度
    需要澄清
    新手友好度
    25/100

    把新 issue 发到你的邮箱

    精选适合新手参与的 GitHub issue 摘要。