LGTM.com - false positive for Zip slip
未关闭
false-positive
Java
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
**Description of the false positive**
The method `allocateFile()` contains the Zip slip prefix checking code here:
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java#L462
It is called by the paths that LGTM complains about.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/OpenRefine/OpenRefine/snapshot/976883440add3f9651f536c4c7fae4997b6a962e/files/main/src/com/google/refine/importing/ImportingUtilities.java?sort=name&dir=ASC&mode=heatmap#x2031d93da0df556a:1
贡献指南
评估
这个 Issue 还没有评估数据。