LGTM.com - false positive for Zip slip
Ouverte
false-positive
Java
- Langage dominant
- CodeQL
- Étoiles
- 10.1k
- Forks
- 2.1k
- Merge moyen
- 2 j 15 h
- PR mergées (30 j)
- 141
Description
**Description of the false positive**
The method `allocateFile()` contains the Zip slip prefix checking code here:
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java#L462
It is called by the paths that LGTM complains about.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java?sort=name&dir=ASC&mode=heatmap#x2031d93da0df556a:1
Guide de contribution
Ouvrir le guide de contribution
Évaluation
Cette issue n'a pas encore été évaluée.