File tree Expand file tree Collapse file tree 1 file changed +10
-6
lines changed
ruby/ql/src/queries/security/cwe-022 Expand file tree Collapse file tree 1 file changed +10
-6
lines changed Original file line number Diff line number Diff line change @@ -43,13 +43,13 @@ instance, if it were created by something like <code>tar -cf archive.tar
43
43
outside the destination directory.
44
44
</p >
45
45
46
- <sample src =" examples/zip_slip_bad.py " />
46
+ <sample src =" examples/zip_slip_bad.rb " />
47
47
48
48
<p >To fix this vulnerability, we need to check that the path does not
49
49
contain any <code >".."</code > elements in it.
50
50
</p >
51
51
52
- <sample src =" examples/zip_slip_good.py " />
52
+ <sample src =" examples/zip_slip_good.rb " />
53
53
54
54
</example >
55
55
<references >
@@ -63,12 +63,16 @@ OWASP:
63
63
<a href =" https://owasp.org/www-community/attacks/Path_Traversal" >Path Traversal</a >.
64
64
</li >
65
65
<li >
66
- Python Library Reference:
67
- <a href =" https://docs.python .org/3/library/tarfile.html#tarfile.TarFile.extract " >TarFile.extract </a >.
66
+ class
67
+ <a href =" https://docs.ruby-lang .org/en/2.4.0/Gem/Package/TarReader.html " >Gem::Package::TarReader </a >.
68
68
</li >
69
69
<li >
70
- Python Library Reference:
71
- <a href =" https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractall" >TarFile.extractall</a >.
70
+ class
71
+ <a href =" https://ruby-doc.org/stdlib-2.4.0/libdoc/zlib/rdoc/Zlib/GzipReader.html" >Zlib::GzipReader</a >.
72
+ </li >
73
+ <li >
74
+ class
75
+ <a href =" https://www.rubydoc.info/github/rubyzip/rubyzip/Zip/File" >Zip::File</a >.
72
76
</li >
73
77
74
78
</references >
You can’t perform that action at this time.
0 commit comments