hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-16 15:03:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

changes to address reviews

Browse Source
This commit is contained in:
erik-krogh
2022-10-07 22:31:00 +02:00
parent 10a014f18c
commit 6fdfd40880
22 changed files with 69 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/Security/CWE-022/ZipSlip.ql
View File

@@ -19,5 +19,5 @@ import DataFlow::PathGraph
from ZipSlipConfig config, DataFlow::PathNode source, DataFlow::PathNode sink
where config.hasFlowPath(source, sink)
select source.getNode(), source, sink,
"Unsanitized archive entry, which may contain '..', is used in a $@.", sink.getNode(),
"This unsanitized archive entry, which may contain '..', is used in a $@.", sink.getNode(),
"file system operation"