We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 44fe34a commit 4e17623Copy full SHA for 4e17623
csharp/ql/src/Security Features/CWE-022/examples/TaintedPathGoodFolder.cs
@@ -8,6 +8,7 @@ public void ProcessRequest(HttpContext ctx)
8
{
9
string filename = ctx.Request.QueryString["path"];
10
11
+ string user = ctx.User.Identity.Name;
12
string publicFolder = Path.GetFullPath("/home/" + user + "/public");
13
string filePath = Path.GetFullPath(Path.Combine(publicFolder, filename));
14
0 commit comments