LGTM.com - false positive for Zip slip
Offen
false-positive
Java
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
**Description of the false positive**
The method `allocateFile()` contains the Zip slip prefix checking code here:
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java#L462
It is called by the paths that LGTM complains about.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java?sort=name&dir=ASC&mode=heatmap#x2031d93da0df556a:1
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.