hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
047ea10a9aa7ab945fe2b2d03f70fd84ee7bfa3e
codeql/go/old-change-notes/2020-11-04-unsafe-unzip-symlink.md
Chuan-kai Lin aa514fff32 codeql-go merge prep: move into go/ directory
2022-05-20 10:07:19 -07:00

251 B
Raw Blame History

lgtm,codescanning

  • A new query go/unsafe-unzip-symlink has been added. The query checks for extracting symbolic links from an archive without using filepath.EvalSymlinks. This could lead to a file being written outside the destination directory.