We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9d2b049 commit bf80840Copy full SHA for bf80840
swift/ql/src/queries/Security/CWE-022/PathInjection.qhelp
@@ -18,7 +18,7 @@ such as <code>..</code>. Such a path could point to any directory on the file sy
18
<li>Do not allow more than a single <code>.</code> character.</li>
19
<li>Do not allow directory separators such as <code>/</code> or <code>\</code> (depending on the file system).</li>
20
<li>Do not rely on simply replacing problematic sequences such as <code>../</code>. For example, after applying this filter to
21
-".../...//" the resulting string would still be "../".</li>
+<code>.../...//</code> the resulting string would still be <code>../</code>.</li>
22
<li>Use a whitelist of known good patterns.</li>
23
</ul>
24
0 commit comments