4 Commits

Author	SHA1	Message	Date
Luke Cartey	1a90f7df2c	C#: ZipSlip - Address review comments. ... - Add backticks - Add extra test.	2018-10-03 11:38:48 +01:00
Luke Cartey	b1d5d5bf86	C#: ZipSlip - Refine StartsWith sanitizer. ... ZipSlip can be avoided by checking that the combined and resolved path `StartsWith` the appropriate destination directory. Refine the `StartsWith` sanitizer to: * Consider expressions guarded by an appropriate StartsWith check to be sanitized. * Consider a StartsWith check to be inappropriate if it is checking the result of `Path.Combine`, as that has not been appropriately resolved. Tests have been updated to reflect this refinement.	2018-08-24 14:27:25 +01:00
calum	82f0c389c7	C#: Update test references to use .NET Core, and change relative directory of moved test file.	2018-08-14 12:52:26 +01:00
Denis Levin	242fba3fd2	cs: Query for ZipSlip vulnerability (CVE-2018-1002200) ... Initial check in to validate the tests	2018-08-13 14:56:45 -07:00