mirror of
https://github.com/github/codeql.git
synced 2026-06-14 09:21:07 +02:00
22 lines
533 B
Ruby
22 lines
533 B
Ruby
class TestController < ActionController::Base
|
|
# this should get picked up
|
|
def unsafe_zlib_unzip
|
|
path = params[:file] # $ Source
|
|
Zlib::Inflate.inflate(path) # $ Alert
|
|
end
|
|
|
|
# this should not get picked up
|
|
def safe_zlib_unzip
|
|
Zlib::Inflate.inflate(file)
|
|
end
|
|
|
|
# this should get picked up
|
|
def unsafe_zlib_unzip
|
|
Zip::File.open_buffer(params[:file]) # $ Alert
|
|
end
|
|
|
|
# this should not get picked up
|
|
def safe_zlib_unzip
|
|
Zip::File.open_buffer(file)
|
|
end
|
|
end |