Skip to content

Validate census archive extraction paths#7983

Open
MaxGhenis wants to merge 1 commit intoPolicyEngine:mainfrom
MaxGhenis:codex/safe-census-zip-extraction
Open

Validate census archive extraction paths#7983
MaxGhenis wants to merge 1 commit intoPolicyEngine:mainfrom
MaxGhenis:codex/safe-census-zip-extraction

Conversation

@MaxGhenis
Copy link
Copy Markdown
Contributor

Summary

  • validate every zip member path before extracting Census block archives
  • move the downloader behind a callable main entrypoint instead of running on import
  • add a regression test for zip-slip archive contents

Testing

  • uv run pytest policyengine_us/tests/utilities/test_download_50_state_census_block_data.py -q

@MaxGhenis MaxGhenis force-pushed the codex/safe-census-zip-extraction branch 2 times, most recently from 69a7c2c to b62f451 Compare April 12, 2026 16:41
@MaxGhenis MaxGhenis force-pushed the codex/safe-census-zip-extraction branch from b62f451 to ec4d2e7 Compare April 12, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant