fix qhelp, fix duplicate query id

This commit is contained in:
am0o0
2024-05-16 15:12:31 +02:00
parent 78dc6502f5
commit f06c3fddd9
2 changed files with 2 additions and 3 deletions

View File

@@ -10,9 +10,8 @@
<recommendation>
<p>When you want to decompress a user-provided compressed file you must be careful about the decompression ratio or read these files within a loop byte by byte to be able to manage the decompressed size in each cycle of the loop.</p>
</recommendation>
<p>Please read official RubyZip Documentation <a href="https://github.com/rubyzip/rubyzip/#size-validation">here</a></p>
</recommendation>
<example>
<p>Rubyzip: According to <a href="https://github.com/rubyzip/rubyzip/#reading-a-zip-file">official</a> Documentation</p>
<sample src="example_good.rb" />

View File

@@ -5,7 +5,7 @@
* @problem.severity error
* @security-severity 7.8
* @precision high
* @id rb/user-controlled-file-decompression
* @id rb/user-controlled-data-decompression
* @tags security
* experimental
* external/cwe/cwe-409