hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Add change note and comment.

Browse Source
This commit is contained in:
Jason Reed
2019-03-15 08:47:31 -04:00
parent a674dbb5cd
commit 8124980f58
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/src/semmle/javascript/security/dataflow/ZipSlip.qll
View File

@@ -60,7 +60,11 @@ module ZipSlip {
}
/** Gets a property that is used to get the filename part of an archive entry. */
private string getAFilenameProperty() { result = "path" or result = "name" }
private string getAFilenameProperty() {
result = "path" // Used by library 'unzip'.
or
result = "name" // Used by library 'tar-stream'.
}
/** An archive entry path access, as a source for unsafe archive extraction. */
class UnzipEntrySource extends Source {