go/gosec
1
0
Fork 0
mirror of https://github.com/securego/gosec.git synced 2025-11-29 22:37:59 +02:00
Code Issues Releases Activity

Rule which detects a potential path traversal when extracting zip archives (#208)

Browse Source 
* Add a rule which detects file path traversal when extracting zip archive

* Detect if any argument is derived from zip.File

* Drop support for Go version 1.8
This commit is contained in:
Cosmin Cojocar
2018-07-18 14:31:07 +02:00
committed by Grant Murphy
parent 4ae8c95b40
commit 1923b6d18e
6 changed files with 160 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rules/rules_test.go
View File

@@ -103,6 +103,10 @@ var _ = Describe("gas rules", func() {
runner("G304", testutils.SampleCodeG304)
})
It("should detect file path traversal when extracting zip archive", func() {
runner("G305", testutils.SampleCodeG305)
})
It("should detect weak crypto algorithms", func() {
runner("G401", testutils.SampleCodeG401)
})