LGTM.com - false positive for Zip slip
Open
false-positive
Java
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
**Description of the false positive**
The method `allocateFile()` contains the Zip slip prefix checking code here:
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java#L462
It is called by the paths that LGTM complains about.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java?sort=name&dir=ASC&mode=heatmap#x2031d93da0df556a:1
Contributor guide
Assessment
This issue has not been assessed yet.