ZipFile.
How It Works
ZipFile.extractall(destination) extracts ZIP entries to a directory. Python attempts to sanitize dangerous entry names, but you must still inspect unknown archives and enforce limits on entry size and total uncompressed data.
Step-by-Step Example
from pathlib import Path
import tempfile
import zipfile
with tempfile.TemporaryDirectory() as temporary_directory:
archive_path = Path(temporary_directory) / 'sample.zip'
destination_path = Path(temporary_directory) / 'extracted'
with zipfile.ZipFile(archive_path, 'w') as archive:
archive.writestr('welcome.txt', 'Welcome to the lab')
with zipfile.ZipFile(archive_path) as archive:
archive.extractall(destination_path)
print((destination_path / 'welcome.txt').read_text(encoding='utf-8'))
Understanding the Example
- The with block manages the opened resource and closes it when the block finishes, including when an exception occurs.
- The expression "Path(temporary_directory) / 'sample.zip'" supplies the value stored as 'archive_path'. This value is then used or checked by the later statements.
A successful run of this example prints the following output:
Welcome to the lab
Where This Fits in a Real Program
A practical archive workflow has separate decisions for selection, compression, extraction and verification. When files come from other people, inspect paths, member counts and uncompressed sizes before writing anything; a successful decompression does not establish that its contents are trustworthy.
Practice: Try It Yourself
Extract a self-created ZIP into a temporary directory and verify the text.
For this exercise, predict the result before running the changed code. Then explain the difference between the original and modified cases using the actual values, not just whether the program completed.
Further Reading
Read the official Python documentation for complete parameters, return types and exceptions.
Common Beginner Mistakes
- Unpacking unknown ZIP files directly over application files without checking names, sizes, symlinks or available disk space.
- Extraction guards do not replace inspection and resource limits for untrusted archives.
Key Takeaways
- ZipFile.
- ZipFile.extractall(destination) extracts ZIP entries to a directory.
- Extraction guards do not replace inspection and resource limits for untrusted archives.