chore: add MAME and RetroDECK ROM sets

This commit is contained in:
Abdessamad Derraz
2026-03-19 23:26:43 +01:00
parent 1fcb948a00
commit 6ee162f8fb
1532 changed files with 25092 additions and 1089 deletions

View File

@@ -116,7 +116,9 @@ def get_remote_sha(source_url: str, version: str) -> str | None:
def _is_safe_tar_member(member: tarfile.TarInfo, dest: Path) -> bool:
"""Reject path traversal and absolute paths in tar members."""
"""Reject path traversal, absolute paths, and symlinks in tar members."""
if member.issym() or member.islnk():
return False
if member.name.startswith("/") or ".." in member.name.split("/"):
return False
resolved = (dest / member.name).resolve()