Luke Cartey b1d5d5bf86 C#: ZipSlip - Refine StartsWith sanitizer. ...

ZipSlip can be avoided by checking that the combined and resolved
path `StartsWith` the appropriate destination directory. Refine the
`StartsWith` sanitizer to:

 * Consider expressions guarded by an appropriate StartsWith check to be
sanitized.
 * Consider a StartsWith check to be inappropriate if it is checking the
result of `Path.Combine`, as that has not been appropriately resolved.

Tests have been updated to reflect this refinement.

2018-08-24 14:27:25 +01:00

..

src

C#: ZipSlip - Refine StartsWith sanitizer.

2018-08-24 14:27:25 +01:00

test

C#: ZipSlip - Refine StartsWith sanitizer.

2018-08-24 14:27:25 +01:00