hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

C#: ZipSlip - Address review comments.

Browse Source 
- Add backticks
 - Add extra test.
This commit is contained in:
Luke Cartey
2018-10-03 11:38:48 +01:00
parent f9227eeee5
commit 1a90f7df2c
2 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
csharp/ql/src/semmle/code/csharp/security/dataflow/ZipSlip.qll
View File

@@ -112,7 +112,7 @@ module ZipSlip {
}
/**
* A call to Substring.
* A call to `Substring`.
*
* This is considered a sanitizer because `Substring` may be used to extract a single component
* of a path to avoid ZipSlip.