safeuploads 0.1.0__tar.gz → 0.1.1__tar.gz

{safeuploads-0.1.0 → safeuploads-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: safeuploads
-Version: 0.1.0
+Version: 0.1.1
 Summary: A comprehensive file security system for validating uploads and preventing attacks
 License: MIT
 License-File: LICENSE.md

{safeuploads-0.1.0 → safeuploads-0.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "safeuploads"
-version = "0.1.0"
+version = "0.1.1"
 description = "A comprehensive file security system for validating uploads and preventing attacks"
 authors = [
     {name = "João Vitória Silva",email = "joao@endurain.com"}

{safeuploads-0.1.0 → safeuploads-0.1.1}/safeuploads/config.py

@@ -57,6 +57,7 @@ class SecurityLimits:
     max_zip_depth: int = 10  # Maximum nesting depth for directories in ZIP
     max_filename_length: int = 255  # Maximum length for individual file names
     max_path_length: int = 1024  # Maximum length for full file paths
+    max_number_files_same_type: int = 1000  # Maximum number of files of the same type
     allow_nested_archives: bool = False  # Whether to allow nested archive files
     allow_symlinks: bool = False  # Whether to allow symbolic links in ZIP
     allow_absolute_paths: bool = False  # Whether to allow absolute paths in ZIP

{safeuploads-0.1.0 → safeuploads-0.1.1}/safeuploads/enums.py

@@ -3,6 +3,18 @@
 from enum import Enum
 
 
+class BinaryFileCategory(Enum):
+    """
+    Enumeration of binary file categories.
+
+    Attributes:
+        FITNESS_FILES: Set of file extensions representing fitness or activity binary files (e.g., '.fit').
+    """
+
+    # Fitness/activity binary files
+    FITNESS_FILES = {".fit"}
+
+
 class DangerousExtensionCategory(Enum):
     """
     File extension categories considered potentially dangerous for uploads.

{safeuploads-0.1.0 → safeuploads-0.1.1}/safeuploads/inspectors/zip_inspector.py

@@ -9,7 +9,7 @@ import zipfile
 from typing import TYPE_CHECKING
 
 import logging
-from ..enums import SuspiciousFilePattern, ZipThreatCategory
+from ..enums import SuspiciousFilePattern, ZipThreatCategory, BinaryFileCategory
 from ..exceptions import ZipContentError, FileProcessingError, ErrorCode
 
 if TYPE_CHECKING:
@@ -220,8 +220,10 @@ class ZipContentInspector:
 
         # Check for excessive number of same-type files (potential spam/bomb)
         for ext, count in file_types.items():
-            if count > 1000:  # More than 1000 files of same type
-                threats.append(f"Excessive number of {ext} files: {count}")
+            if count > self.config.limits.max_number_files_same_type:
+                threats.append(
+                    f"Excessive number of {ext} files: {self.config.limits.max_number_files_same_type}"
+                )
 
         return threats
 
@@ -355,9 +357,15 @@ class ZipContentInspector:
                         )
                         break
 
-                # Check for script content patterns
-                if self._contains_script_patterns(content_sample, entry.filename):
-                    threats.append(f"Script content detected in '{entry.filename}'")
+                binary_exts = set()
+                for category in BinaryFileCategory:
+                    binary_exts.update(category.value)
+
+                ext = os.path.splitext(entry.filename)[1].lower()
+                if ext not in binary_exts:
+                    # Check for script content patterns
+                    if self._contains_script_patterns(content_sample, entry.filename):
+                        threats.append(f"Script content detected in '{entry.filename}'")
 
         except Exception as err:
             logger.warning(