Guard root path when unzipping archive (#2786)

hacs · Jul 13, 2022 · 7089028 · 7089028
1 parent 3eb2982
commit 7089028
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/custom_components/hacs/repositories/base.py b/custom_components/hacs/repositories/base.py
@@ -619,7 +619,10 @@ async def download_repository_zip(self):
             extractable = []
             for path in zip_file.filelist:
                 filename = "/".join(path.filename.split("/")[1:])
-                if filename.startswith(self.content.path.remote):
+                if (
+                    filename.startswith(self.content.path.remote)
+                    and filename != self.content.path.remote
+                ):
                     path.filename = filename.replace(self.content.path.remote, "")
                     extractable.append(path)