mirror of
https://github.com/github/codeql.git
synced 2026-04-25 00:35:20 +02:00
Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
This commit is contained in:
@@ -20,7 +20,7 @@ In the following example, the decompressed file size is not checked before decom
|
||||
<sample src="example_bad.java" />
|
||||
|
||||
<p>
|
||||
A better approach is shown in the following example, where a ZIP file is read within a loop and a size threshold is checked every cicle.
|
||||
A better approach is shown in the following example, where a ZIP file is read within a loop and a size threshold is checked every cycle.
|
||||
</p>
|
||||
<sample src="example_good.java"/>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user