fix: Fixed sanitation of symlinks during extraction

uniget-org · Oct 13, 2023 · b86dd72 · b86dd72
1 parent 8f2bd39
commit b86dd72
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/archive/new.go b/pkg/archive/new.go
@@ -26,6 +26,7 @@ func pathIsInsideTarget(target string, candidate string) error {
 	realPath, err := filepath.EvalSymlinks(cleanPath)
 	if os.IsNotExist(err) {
 		log.Tracef("Path does not exist (yet): %s\n", cleanPath)
+		realPath = cleanPath
 
 	} else if err != nil {
 		return fmt.Errorf("ExtractTarGz: EvalSymlinks() failed: %s", err.Error())