1
1
package test
2
+
2
3
//go:generate depstubber -vendor github.com/beego/beego/v2/server/web Controller Run,Router
3
4
//go:generate depstubber -vendor github.com/beego/beego/v2/server/web/context BeegoOutput,Context
4
5
5
6
import (
6
7
"encoding/json"
7
- beegov2 "github.com/beego/beego/v2/server/web"
8
- Beegov2Context "github.com/beego/beego/v2/server/web/context"
9
8
"github.com/astaxie/beego"
10
9
"github.com/astaxie/beego/context"
11
10
"github.com/astaxie/beego/logs"
12
11
"github.com/astaxie/beego/utils"
12
+ beegov2 "github.com/beego/beego/v2/server/web"
13
+ Beegov2Context "github.com/beego/beego/v2/server/web/context"
13
14
"io/ioutil"
14
15
"mime/multipart"
15
16
"net/http"
@@ -30,7 +31,7 @@ type bindMe struct {
30
31
func fsOpsV2Test (ctx * Beegov2Context.Context , c * beegov2.Controller ) {
31
32
input := ctx .Input
32
33
untrusted := input .Data ()["someKey" ].(string )
33
- _ = c .SaveToFileWithBuffer ("filenameExistsInForm" , untrusted , buffer )
34
+ _ = c .SaveToFileWithBuffer ("filenameExistsInForm" , untrusted , buffer )
34
35
}
35
36
36
37
// BAD: using user-provided data as paths in file-system operations
@@ -40,9 +41,9 @@ func fsOpsTest(ctx *context.Context, c *beego.Controller, fs beego.FileSystem) {
40
41
beego .Walk (nil , untrusted , func (path string , info os.FileInfo , err error ) error { return nil })
41
42
fs .Open (untrusted )
42
43
c .SaveToFile ("someReceviedFile" , untrusted )
43
- beegoOutput .Download (untrusted , "license.txt" )
44
+ beegoOutput .Download (untrusted , "license.txt" )
44
45
buffer := make ([]byte , 10 )
45
- _ = c .SaveToFileWithBuffer ("filenameExistsInForm" , untrusted , buffer )
46
+ _ = c .SaveToFileWithBuffer ("filenameExistsInForm" , untrusted , buffer )
46
47
}
47
48
48
49
// BAD: echoing untrusted data to an `http.ResponseWriter`
0 commit comments