adoptium / adoptium/aqa-test-tools
Uncontrolled data used in path expression
Open
- Dominant language
- Jupyter Notebook
- Stars
- 33
- Forks
- 97
- Avg merge
- 7h 9m
- Merged PRs (30d)
- 5
Description
The testOutput file name while storing user feedback should be sanitized.
Issue details:
Contributor guide
Research direction
Review the linked screenshot, then locate the code that constructs the testOutput filename while storing user feedback; the issue names no file or test. Trace how user-controlled input reaches that path expression, and verify that stored feedback uses a sanitized filename without breaking normal output.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100