hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
This commit is contained in:
Tony Torralba
2022-12-05 15:37:40 +01:00
committed by GitHub
parent 9d2b04928d
commit bf8084080b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
swift/ql/src/queries/Security/CWE-022/PathInjection.qhelp
View File

@@ -18,7 +18,7 @@ such as <code>..</code>. Such a path could point to any directory on the file sy
<li>Do not allow more than a single <code>.</code> character.</li>
<li>Do not allow directory separators such as <code>/</code> or <code>\</code> (depending on the file system).</li>
<li>Do not rely on simply replacing problematic sequences such as <code>../</code>. For example, after applying this filter to
".../...//" the resulting string would still be "../".</li>
<code>.../...//</code> the resulting string would still be <code>../</code>.</li>
<li>Use a whitelist of known good patterns.</li>
</ul>