Files
codeql/ruby/ql/test/query-tests/security/decompression-api/decompression_api.rb
2022-05-28 23:29:58 +00:00

16 lines
369 B
Ruby

class TestController < ActionController::Base
def unsafe_zlib_unzip
Zlib::Inflate.inflate(params[:path])
end
def safe_zlib_unzip
Zlib::Inflate.inflate("testfile.gz")
end
def sanitized_zlib_unzip
if params[:path].in ["safe_file1.gz", "safe_file2.gz"]
Zlib::Inflate.inflate(params[:path])
end
end
end